last executing test programs: 3.488247657s ago: executing program 3 (id=9266): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x361}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r1, @ANYBLOB="0000000000002b956d9b3e6da4e40000ba0000009500000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x33, &(0x7f0000000100), 0x120) 3.391252979s ago: executing program 1 (id=9267): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xa5, 0x7, 0x0, 0x0, 0x80000401, 0x18402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x9}, 0x11362, 0x800000000006, 0x40000, 0x6, 0xfffffffffffffffd, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.329239331s ago: executing program 2 (id=9269): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003b80)="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"/263, 0x107}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x0, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x45) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000000c0)=""/196, 0xc4}, {&(0x7f00000029c0)=""/4083, 0xff3}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000001940)=""/4100, 0x1004}, {&(0x7f0000000400)=""/65, 0x41}], 0x7}, 0x0) sendmsg(r0, &(0x7f0000003b40)={&(0x7f0000000480)=@isdn={0x22, 0xfe, 0x4, 0x5, 0x2}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000000940)="cebffad4d41ac106e6e1dea2e26babf918e9c77e440facc189a6fd36a682f0e2ef8e9a610ca170133560cd302788d055bb3ae5e1d42caea1bd8d6bb9fb58b30dc2e84d475cf5aeff63b598c2b75a69c66b1a4b88b1b5769aa3c44e4e12af500afd115fd4634da80a98c822a2bbdb7d6f17438af172d319a04c5234fee2e0db1f4a74aac74645ba0cd30c978fc204aca6ca7c4d76b6cc20089766f6a13bca429f5431b9a362baf354d950e4d10f89c4b57d1ae1d1caee3ad9b8168b334355ae16ee1cd7c30c852cb5482b08ee3dd7fde072e38ad4c466950acaf0eb1ab795ca1a2cd80ca4ac213850f9f1914fc4931fd2f8ee12586d800a883109a6871d34cff1d936da9c683c0b002b264e34910c73a18a3cf58b0b7d05cb2a421a0bc04d4b475748f28e34bfd0ac08c0a2d1ff486f7165213e625512834b029dc7c6730e3cf347b833ed4b868452a0edc1558f01de1dddd712c9ff165520b2b09224340e6c4ec0ad0251d5111375b6de14150a324ccc7cd53d0ab4e548110ec52645dbe4221356e44a89bd7384aae1901a852f27bf98daf92a5c79cfbb03f0c6f1e8adb19e684823588c168dd54c3e7540f741ede1a23c00045caed123b3b3dcc2698901238374ea4a7a2d6a3243f6e4afdabd992222698001247254b862e0926503627dc4e55dabe6423d5d6d90567585e22fb5fd42e354860fe51e00ae13eac62178c8eb03c1cd53b89af0674ad6ccbe01f30120adc836f02a2af73c53c91f088c821dc60e6668909b984e6e86add0198bd83c5e4ca7a035a3800e55267595dadc404c2bae409817dcc95cf5b7945f932aeee41d1ca831b221f2ae0d3271a38744a61cb5acdcd8ace7e3c01c3b0290537490df088538882b476182d39c1cb314bb97fa143b5b17374aab25f97e72dbf64eceac39dd4d3cc51eb56c1441374d4a16dde23481802740875228ce1fb88988a8421777098393ab0a418d2879118cc452a791f7dfb49cd467a956dcbb7bd57f7d4406713bc7fedcbc4e470b7f962be391bb99b86d97144747692c618b6f782228070e248e61aa219c0e5e6504f74c17c0ad725452749cf7e8cad972d9fff8bbd6aa3d7d681da39e1ea6d4c91f6161000157a1180ecaa0f9fdb056ac857fd20d45637ffd39f2f03d55022d59387799ead020a3568b24b445e1c4b95f4e1807e49e705f1f249d53f1845cd3e427c13be6b15fbdd5f65383cd1a5dfdae3858c0d818501abd3fe9d264b765e98c477d1d9b13c2db275fce2a166006322edb5dbe841403076b795c9a7a8c5c2f70fc1c39a2695d0ba08096812910a53abfb52ff9a2da17bc00125993f03f9da84980d04badbdb7af6638b786e5811c5502de5725a1ce84f35e74b5f1a6884df268ea81a21b5b61661ac71f11889a30d2f1ec0fb1b112b97b319266c271c117252f51526061d0d9a6776db2ba36382ae4aaa37a374458ae8f15905278f8a6baed8c26b6c16145d7cec0f153681dcc88d918c004103cbd9b7ac4818fcbc56b5168b98d17e4d670c327645be4d8327bb26fbeafaefc7c1a851ee539e0aac42b00c4677239de285d665c63e0f1f10b8c74c41ebaf4803ddab2806b9e2d43aef71199517858604c5b36172923a87a6dfd06d46f391797a8744f2128cf0003cd976e5c58a471379bc4602eb6ac12737643e852e6055baf64904d7a2849b148a31cbfb26c3059b63d49f6cc69ddeb057bd300b9e34c1123c03d9dbf349ec0e2cd4604eff11e926ce039c9992fba8cec3b51ad4670dac577f0e9079b446803e4303d06441429395ac78ff5eefcb2baa649c4eae544e8dbdb09a3e850b0fa005dc578c5525dbb303e8aeceaa56fc92c26e0a1fc96a807fb353ea64c490988f030256b139458aeebe8a2f85653e75c96d7132e98b2f428063a0cde7ee8b6c605067541d91874b5fcc6bd298dd97059d6d8938e04729e676bf5b5d29ae3c58183900fb1603ee47f1cf481957bca8e353f27405e4ebe1fd04b66a6b0db34501b13e5cf702b600de6d30267c917a6ac4c8345e59251cdab71ab55d50c24805353ff04f8d317cc79a8414260c34e23717bcc7f63001a6debc4f032cf8e63b30c52b050bde0bd8c016169ad378219c41f03c9d742d47832cb4fdd1780e44034138b54067998811e428d1468e14df5a81bdae92df5d677c6fa4322dc34df4bf6005646aae6e66c336614338998c0534e886781e6dfe1cdc831b4e1d20d0fdf491924bad3af2d9465812aa91790a00d6610289a78ca553e0580685f9dfb5b7388e64d1f07992a54c7044688670ae684f55568803c3e9f2583bceeed401e6bb9a26ac3d2ce7e4e7c91985528cc3a8ca15bd519e9a15c988b79fee99059b11d0f404c1e00049392c7074c36b421d66ad73f8f34f4456082dfe910bbe34f1cede8fddf8df74771e557b840e44fd3b23c68876045450a906c9836876d287e1c1343b9c29fbf7b77759a6be643253d8d05a58cd6b4cc1e4dc4b42cc619f9122186a441932006976eb130d1d63c8678dbe113f6e025ffcb4a61ea68249d3c78f92ec71df1cc238d49b488e3f754fa60262aabb4d4ec5cc17ee7a0507f7837f4c7358088ed494a4f2de3d1bee7c320c20bd6a80f03a511f6255d74044047a29901983b51ce140dcab6d19a522ebac2262cf049703aa0f468cb840f98b0df21910bf33734f056c545b403f2823fec2d782c0911286b97e9b2707be52598948b677386d5aae3c6490e0c702ce427ead133510870f79ce2f613332b45bb2f5371c1ff55538d06943a6987399a539f0c82a179aac75956b6658bd67658f620abd904a64d202d08e4d654bcf1aa7cb6a461aa1397ded2ee01c600d9c534b93b31aacced6839f6a8ea999c8e7924c113991b60dc392d518e1766eb29bf7fdb4282925c840061664ae029f79e622e631066df9d3b47523999be4b868d642274a8e886c9ef89deb806843c19a13b73a2b2e9256f76e0f9a08bb6208c23a6169d0dc4daa1a64c0bbb9a58ac8a8ea67bb79254af83e6f640572cb84203a02e9794965196f70577e64ac6804bdb4f37b876ace468ba525e41bf9b723ca52781cc233721bf3b870c532b4d266a99e004e0664f42ac1b0880ede6d37d3e13644a76ac4c8787cc8ec5905744bbea903e87f34902b8bb7ca7834aa8f687d17908acbd56428d4da00c324c311c2884e3d95207f14b4878139147a8f546f28532ec476aa96646fd13c723d82bf1ef055992a1cd80f0f0528036c5a8c82a9c30fa1e6d63357df6e9384ec4360dde855ed7d18178c0bf92554498ed88c2ac8feaba643798b6d138e4fcb17f0014d85939c2fb28cf08b8ce2513cf9416b46cd3a28ade56683abbabfc46f61b228dc0914e8e3e5377edd9943db683b943ece19a23f7ec780ea055cfcda9b2ae14322450458bb829128fe990b1bc22b12bbb362242c9c2f08837eee4d82fefd3e62e09e5c16a89f940b3e758e4ca122f1b56d15e1d90f6550920aef1dcadb444d2bbfbe148f4e5fe9da4670faeb3bdd835caf73924b5144e1fa329234ac76fdeb73bffbbcc857dfb2ffd4370057aaa1e5ab8c906dbf55fbf78a086d6b0eb9a67f28cbb900192a3182b929338794f1b381a740ee7033884d75cfdd461b251d68953ae5d6506b734b8c10241ff9762e2151d8dc34311354d2977986b9997fb92b91b91a682e3a6ab0fb44e5a33e3f8938f51ef159e5913882fe10b3a629a127b088abe9f066f300302177cd4d60cd880236cb0a4267d774ebd2fba6f6bf1c2b7e4208dcc0b92c2591bdc1f06356c08f004e8aef06fd7d3f0da9eba776f5aa146006a323f733ce30536923a2114534f10e97371e52972e5109f964e78c2f98a171deab6af7de8ab36720c9b755d74c3a4f59bfe733de5e8227d9334f6fe07b32aa422fc4b431474edccc4cc8792dd9d25b09e53ad3c61f406491f661e02ac8d87fd49a7df349fbbfa3f26c7e332f2b86c874ec60afaa365dd19c578191a040814ab8f5f30f87741c077215eb590dd5ad5203249352ede0e64f10e04908fa0a4942f473ab54727ea88551ac2e1e4ac29433aaf62832cb5d0ee16b81a955846aa1c6bba42de1bf7ebb455b0d2fb8ce3d1d824d1b55acf018d9e66389572bd0e5a9cb6304a3603fe4ef8c77def4dc5b08ab03fa6cc1db6c5f6f9f1d1ae57eb311d87f119c1072a32d3fbbfe356899c8229355cb5d606e2fd1a396e704ee51d5a496a3377340333b8b038878c6fe2b6797c445a0acc51d374d5244512616a42062772b827bf4fb9c99d12340c7cc4a8bb2965565f591f8d0dd6647604b3b160c2cd700cdfa8386fa6eaed47fd07be02cdbebca3541a06fcc495100360d4b9bfdfa6fc3e4349a852ef89637bbe2c88c7cdc2e14976879854ae8b8fe01b4b8200574d398c5c320502b45b0993ef517496094bc3efe71040913d86a900f5a09991d0479136c76bf284bf58e91aa84b520fa762e236e0c82ae2547cc310538533aedeb95a2bd22e1a60863546606979940a1ff170ba43f38e47384c786f60e988e4c14243cbd04d4f015d7005ad402ce13be4c5add9e02f5f603dbb03dccb1db923affe32c01a54dd7513001d51ea4524f2f5da6dd6e41b5b81ab066e6842fcdbd378306165e8d6d7e395cef000641997d74bf72b5a66182f268cb978b0ef83eb1f49012acf899fcc5b71120cf7b025c705afd3b7e47ec4d1ab54b689839575c9b88de4dca75a0398eea8fb071d9fd5312e82839c973db6878d3b1106f6afb52b907bf7660446c2caacc89c5754ada3dd609d7dfed7df0a6e66f6bba528fa0e53202390480c97c745df4c37c6cfc7d8d28b493ccfdffcd16596ea9d72ae92c1655718bb0d729510c1a12315f4e56f09151108b3da8d75075df96feb275464f90835afb420b8f4f93bb632c1a1933241ce350e047df22d547a04d14b87bec8d68428e50031671bbf4a574cf211b3aec6aa9df4872303767524de03b16655e65d02334c92919d211b1f5acfa4cdec578fc18c5d28700832058d9cda8fbfc1aebc04c8f5d3e8441b6d4262f987795c0778206e497f5edfa68f81c976ab817d469643224f19062e1981f8895b8d3e16f3772c4334d23ee673abd60dc3cc401a7f0a183855f53cc3568c70502b4e461273745de6bae14ec65d6550d7832d125c075e039f2d0e89dd7f187a1551e402a230b91021dfe0339c279dc409755d3b27a38198b232467a1229a524541f4d1831db1b89321af90584f92e656f2db2f50f30f1096c5f414037c07a0a1155797f16a6d990128072a308c9358a783ddcc19633ccd39e7c9f3a455d20d93a5dba652f0a1be52c8ac836123045a19fd40f036439e27588574fb3f53291d6ab134912d0cf7b682224bd4dd590af6258a647142dd6df7482cea1f440568106ea0de03d00ee90f7e88ea2acc9747bce801dfd644479c19bcf6d7b407934830594ca93fd6cc26a8838fdbcf0ea4a7502a390caf68112cf4ba574963826bd4a8e6cdbb4cda43316e2632f804fa2db86b3fc09a3ff35965e93a7e8e4b1d7652ac0c2ea9025c381cf63b272e4f307a251c3ceccdb679718f9719e05bb878da0bf8b6c047d7adbfdd5af1b36cfddb8c9b0325f662644c7e606ac042a80fd4b46c4db2e0b8506a2b20d51a7e95d191f422fe101cdfaa27924fafab3a2c87f3acf0e15d7b003ac896f06581cda4c7e3716c2b6c3d7cf69f8f16f72fde7983acc22f1e7c4b4c8f4726d4ef47d3c32dd28fd8f8a45963b9e76c9d8b018d6457542cecb65951947db466fa41582864c932194d185d8", 0x1000}, {&(0x7f00000039c0)="05d672b8dce9bf0ac788bed31a722eb0130b245f9057907eb6ee5861094631e9e4c9c49ed5cb8f59110669cfd2475db74d10d35ba9cde49e6a2c4ae768fc9b767c6038dfd73618c56b101ee8ad83830006aeb6cddc2646c45767e6f4366d6c0d6b59c4f2b3cc79130c899ada1f5c0af15b0e443da67144a1fb3977cc4f394497f9e6150e04107292344539005eadac38b73b43ec66e578475bb1979b5e5b", 0x9e}, {&(0x7f0000003a80)="00b5ad7fb5733a9938bc4432e5cf", 0xe}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000000000077bb53be7c699d010000008a34ec2a500a07b98b63555ea7dc3a17d610ef0144147a00bf155144505aea318a794d3e7759448472dade0e1242429228c191f1426e0be2929bc40df53963f8bc9f42a5ac5b3a0d295ea7297593eaf580adb6df0b86b047c40375525801a95f32e6c3921864eac168c1761a5b8b8d2d8556294ac225f4ec3235f449399b640c58216e7ae2e139f06fbc645d818c3e6aea528b042a5ae9b23ca96b5e46c8e3a80406e9cb10c8793e8560156ebbf8350a02ace2cf16cfeab922ef5a410e27580fd4bd4650ac85715986eea1e263de64672000"/240], 0x28}, 0x2) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x180) 3.328581941s ago: executing program 3 (id=9270): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41}, 0x69) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0) 3.165235035s ago: executing program 3 (id=9271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffffffffff0, 0x8}], &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000180)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) 3.164655795s ago: executing program 0 (id=9279): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.164193525s ago: executing program 1 (id=9272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b3f8646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.107971856s ago: executing program 0 (id=9273): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000010000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.084975957s ago: executing program 1 (id=9274): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x10, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0x33, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d500000001000000140000", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 2.97109838s ago: executing program 0 (id=9275): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) r1 = getpid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x7fffffff, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000780)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/162, 0xa2}], 0x5, &(0x7f0000000680)=""/227, 0xe3}, 0x2000) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x5, 0xa9, 0x4, 0x9e, 0x0, 0x6a795012, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x8}, 0x0, 0x4, 0xef0, 0x0, 0x7, 0x5, 0x5, 0x0, 0x1000, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000880)="6a15d4260ba302f239557b68e93bd277427759dc0f999f33f84a8f698ee777e4368cdf67a3314b02deab0d8258f10131e9983df5e686ecb719674212ab2200340c99dca70e225fac1c720063cd2e90167ecbfe765e3f58006d2559", 0x5b}, {&(0x7f0000000900)="8dabf8216bc8dd6b79e8142c1eaf8a195a2abc586225aa028bb8630a3a5eede09595d89ab08e76d2f16f137d65626b1545abda866b7cfbb19af2fa022af3e26ee92aac62198b1b5e042f27d40e579a4c3741f0e2dc47f5fef86a10ad2e73d4285bc30f79fe3302a84d135d692a7668f3c923325d8763de6e487d2baf856e48810f19b18fbf0e45aa025ffed7816a4617ae37235be7fc2a81d5620e05b1454f2aba2bb98ef63b6ff166e7db1476", 0xad}], 0x2}, 0x11) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000a80)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @broadcast]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b00)={'batadv0\x00', 0x100}) socket$kcm(0x29, 0x3, 0x0) mkdirat$cgroup(r3, &(0x7f0000000b40)='syz1\x00', 0x1ff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r3}, 0x18) perf_event_open(&(0x7f0000000c40)={0x3, 0x80, 0x76, 0x81, 0x1, 0x81, 0x0, 0x1, 0x20000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x87e3, 0x4, @perf_bp={&(0x7f0000000c00), 0x6}, 0x0, 0x7, 0x6, 0x2, 0x5, 0xe99d, 0xe, 0x0, 0x7, 0x0, 0x7}, r1, 0x0, r6, 0x1) openat$cgroup_procs(r3, &(0x7f0000000cc0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r7}, &(0x7f0000000d40), &(0x7f0000000d80)='%pK \x00'}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000e40)={r3, r3, 0x0, r2}, 0x10) sendmsg$sock(r3, &(0x7f0000001340)={&(0x7f0000000e80)=@l2={0x1f, 0x9, @any, 0x8}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)="47fc114c43e126df175ec40944edeb3e53c00b05444e61142f726fa4c36815947499a25fcec47d52c082fdf51cde180b75f01e23778f9e2a0d150f8cf8ea2e228bb5101d73712d78f10bf202b373124147098dbc027cf64c33bfc4570680877391a35bcb85590ed3e1", 0x69}, {&(0x7f0000000f80)="67e74f45267a874c1032101ec4754337345b7a8d9f15785fd1526a1d1733f135ff38b668ec5cc9787476c8b59e3afdf9555eaeca270965295303520f2f8aefa307204363349c48ba4e68b9452065bfe635321fb99ad1afbf4bef6c8e81beb8b154006118b4ae6ee0de9bcb23f226b498f6152f3bdc3fe27fa0fb9ecec523", 0x7e}, {&(0x7f0000001000)="b3768b017cfa6c86488c5ff51b77874cdbe28c743e0a04ca90d614996ff464", 0x1f}, {&(0x7f0000001040)="6a19ef501eb3ff299da087dc608058787f45de49fedf655a1016f1d7c9aebde93be1256ae080367f4ed87051535f953abbb0d817ad553f764ae6efb66c852a0ecf4ddbce706ff07a858bb5ffb632c70d445510deeab62ed054453ffbfc9d068164d4e23c088ea135bf7dd96cb6e8cbac0587e6701c90b02f6e252276b56830", 0x7f}, {&(0x7f00000010c0)="1b65d0d70d8f82dd5867de1056", 0xd}, {&(0x7f0000001100)="f70397a4fc3154587461d80f7f73de85d376d6c0d36875be7f60897e82e0a465d5acb164af5d97a40f152d41d1364c7db3b3c7ef53d3efebce6746fc201f0cfa8687e23658a6eff1f75331229f6d733d91722dcc72dcb5f2bc409bd84c4479c950c16eb592d467562e43517264c89bff6ffbfe0327e49cc81a5200d6332f7a10a6df9929132681c1906a2f245230128d4b9dd499079ac4294429a518", 0x9c}], 0x6, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xe8f}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3795}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7aa}}], 0xd8}, 0x8000) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001380)={r4}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000013c0)=r8, 0x4) 2.880365102s ago: executing program 1 (id=9276): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000004a00)=""/4121, 0x1019}, {&(0x7f0000000f80)=""/4094, 0xffe}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000f00)=""/94, 0x5e}], 0x6}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0xb}, {0x10}], 0x20}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000010c0)=ANY=[@ANYBLOB], &(0x7f0000000fc0)=""/5, 0x8d, 0x5, 0x0, 0x10002}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], &(0x7f0000000840)='syzkaller\x00', 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xe, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, r2, r2, r2, r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0xa}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@union={0x1, 0x5, 0x0, 0x5, 0x0, 0xfffffffa, [{0x9, 0x2, 0x2}, {0x4, 0x2, 0xfffffff8}, {0x1, 0x2, 0xffff}, {0x1, 0x1, 0x2}, {0x7, 0x1, 0x6}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000600)=""/22, 0x75, 0x16, 0x1, 0x312b}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3, '\x00', r4, r9, 0x5, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 2.363766774s ago: executing program 2 (id=9277): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffdfffffffe, 0x80450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xccd9, 0xfffffffffffeffff}, 0x0, 0x10000, 0x9e4, 0x8, 0x8008, 0x20005, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}, @datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x1, 0x8}, {0x2, 0xd8a2, 0x5}, {0x4, 0x8000, 0x8}], 'ob'}, @float={0x80003, 0x0, 0x0, 0x10, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x202, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x3b, 0x5}, @restrict={0xb, 0x0, 0x0, 0xb, 0x3}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x400, [{0xf, 0x0, 0x9}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000001d00)=""/93, 0xb4, 0x5d, 0x1, 0x9}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="840a0000000000006110a000000000001800"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 933.736718ms ago: executing program 0 (id=9278): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1, 0x361}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) r2 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r1, @ANYBLOB="0000000000002b956d9b3e6da4e40000ba0000009500000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x33, &(0x7f0000000100), 0x120) 933.377828ms ago: executing program 1 (id=9280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x8000) (fail_nth: 7) 930.738128ms ago: executing program 3 (id=9281): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x4, 0x4, 0x3, 0x3}}, 0x80, 0x0}, 0xe07e872420dfefca) 875.021979ms ago: executing program 2 (id=9282): bpf$PROG_LOAD(0x5, 0x0, 0x0) 461.580079ms ago: executing program 3 (id=9283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b3f8646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 460.823659ms ago: executing program 2 (id=9284): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000010000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000640)="d9b9547ed3c002", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 424.68778ms ago: executing program 0 (id=9285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) gettid() gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=ANY=[], 0x88, 0x4040040}, 0x40c0) syz_clone(0x10021400, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) 421.61026ms ago: executing program 1 (id=9286): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000006, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 313.632003ms ago: executing program 3 (id=9287): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xff, 0x20, 0xe2, 0x81, 0x0, 0xfffffffffffffffd, 0x55352, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x1e1aa, 0x4000000, 0x0, 0x8, 0xfffffffffffffffb, 0x5, 0x7, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x13) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40001) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) 312.772643ms ago: executing program 2 (id=9295): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000010000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000640)="d9b9547ed3c002", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 129.368047ms ago: executing program 2 (id=9288): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x4, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8931, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20140) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) 0s ago: executing program 0 (id=9289): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0xf, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8004, 0x9, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0, 0x4000000000}, r1, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700006011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) close(r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1ac08790fcb87507}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f8, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="01000000090000000500000007"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): type 10 has an invalid length. [ 1478.397958][T30662] team0: Device wg1 is of different type [ 1479.172814][T30685] netlink: 'syz.0.8305': attribute type 10 has an invalid length. [ 1479.203128][T30685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8305'. [ 1479.213891][T30685] ipvlan1: entered promiscuous mode [ 1479.219186][T30685] ipvlan1: entered allmulticast mode [ 1479.243333][T30685] veth0_vlan: entered allmulticast mode [ 1479.252507][T30685] bridge0: port 4(ipvlan1) entered blocking state [ 1479.265720][T30685] bridge0: port 4(ipvlan1) entered disabled state [ 1479.284437][T30685] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1479.480224][T30692] netlink: 'syz.0.8309': attribute type 4 has an invalid length. [ 1479.492933][T30692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1480.356131][T30719] netlink: 'syz.1.8319': attribute type 10 has an invalid length. [ 1480.379597][T30719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8319'. [ 1480.409193][T30719] ipvlan1: entered promiscuous mode [ 1480.426569][T30719] ipvlan1: entered allmulticast mode [ 1480.433826][T30719] veth0_vlan: entered allmulticast mode [ 1480.442386][T30719] bridge0: port 3(ipvlan1) entered blocking state [ 1480.450466][T30719] bridge0: port 3(ipvlan1) entered disabled state [ 1480.480555][T30719] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1480.834936][T30733] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 1480.860869][T30733] mac80211_hwsim hwsim83 wlan0: entered allmulticast mode [ 1481.822163][T30768] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8337'. [ 1481.890693][T30768] ªªªªªª: renamed from vlan0 (while UP) [ 1481.969584][T30771] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8337'. [ 1482.841998][T30794] netlink: 'syz.2.8346': attribute type 2 has an invalid length. [ 1482.849947][T30794] netlink: 119 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1483.163434][T30807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1483.536725][T30812] netlink: 'syz.3.8353': attribute type 10 has an invalid length. [ 1483.575015][T30812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.582779][T30812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.640731][T30812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.649030][T30812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.657954][T30812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.665188][T30812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.716191][T30812] team0: Port device bridge0 added [ 1484.273073][T30824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8357'. [ 1484.417066][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.426391][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.473896][T30832] netlink: 'syz.1.8361': attribute type 2 has an invalid length. [ 1484.504984][T30832] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1484.870447][T30839] mac80211_hwsim hwsim88 wlan0: entered allmulticast mode [ 1486.439658][T30877] netlink: 'syz.3.8374': attribute type 2 has an invalid length. [ 1486.448219][T30877] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1486.800184][T30886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8377'. [ 1486.818511][T30886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.894411][T30886] bridge_slave_0 (unregistering): left allmulticast mode [ 1486.901639][T30886] bridge_slave_0 (unregistering): left promiscuous mode [ 1486.909265][T30886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.979167][T30889] netlink: 'syz.0.8378': attribute type 2 has an invalid length. [ 1487.164227][T30894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8380'. [ 1487.174540][T30894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8380'. [ 1487.195339][T30894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8380'. [ 1488.131975][T30911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1488.229634][T30915] netlink: 'syz.3.8386': attribute type 2 has an invalid length. [ 1488.263064][T30915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1488.994977][T30939] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1489.039620][T30939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1489.047257][T30939] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.054842][T30939] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.062288][T30939] IPv6: NLM_F_CREATE should be set when creating new route [ 1490.275533][T30961] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 1490.408716][T30969] netlink: 'syz.2.8407': attribute type 13 has an invalid length. [ 1490.432673][T30969] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1491.526675][T31000] netlink: 'syz.0.8421': attribute type 21 has an invalid length. [ 1491.548991][T31000] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1491.649712][T31000] sit0: entered allmulticast mode [ 1491.734779][T31005] sit0: entered promiscuous mode [ 1492.245774][T31020] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1492.262181][T31020] netlink: 'syz.0.8426': attribute type 21 has an invalid length. [ 1492.277441][T31020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1492.691303][T31039] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8432'. [ 1492.726337][T31041] netlink: 'syz.2.8433': attribute type 23 has an invalid length. [ 1492.734603][T31041] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8433'. [ 1493.569856][T31061] FAULT_INJECTION: forcing a failure. [ 1493.569856][T31061] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.602581][T31061] CPU: 1 PID: 31061 Comm: syz.1.8436 Not tainted syzkaller #0 [ 1493.610104][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1493.620231][T31061] Call Trace: [ 1493.623538][T31061] [ 1493.626497][T31061] dump_stack_lvl+0x18c/0x250 [ 1493.631220][T31061] ? show_regs_print_info+0x20/0x20 [ 1493.636493][T31061] ? load_image+0x420/0x420 [ 1493.641041][T31061] ? __lock_acquire+0x7d80/0x7d80 [ 1493.646119][T31061] should_fail_ex+0x394/0x4c0 [ 1493.650836][T31061] should_failslab+0x9/0x20 [ 1493.655385][T31061] slab_pre_alloc_hook+0x59/0x300 [ 1493.660447][T31061] ? bpf_test_init+0x9f/0x140 [ 1493.665160][T31061] ? bpf_test_init+0x9f/0x140 [ 1493.669873][T31061] __kmem_cache_alloc_node+0x53/0x250 [ 1493.675290][T31061] ? bpf_test_init+0x9f/0x140 [ 1493.679979][T31061] __kmalloc+0xa7/0x240 [ 1493.684159][T31061] bpf_test_init+0x9f/0x140 [ 1493.688688][T31061] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1493.694080][T31061] ? __lock_acquire+0x7d80/0x7d80 [ 1493.699127][T31061] ? lock_chain_count+0x20/0x20 [ 1493.703994][T31061] ? dev_put+0x80/0x80 [ 1493.708118][T31061] ? dev_put+0x80/0x80 [ 1493.712216][T31061] bpf_prog_test_run+0x31f/0x390 [ 1493.717173][T31061] __sys_bpf+0x49d/0x890 [ 1493.721439][T31061] ? bpf_link_show_fdinfo+0x390/0x390 [ 1493.726832][T31061] ? lock_chain_count+0x20/0x20 [ 1493.731701][T31061] __x64_sys_bpf+0x7c/0x90 [ 1493.736134][T31061] do_syscall_64+0x55/0xb0 [ 1493.740562][T31061] ? clear_bhb_loop+0x40/0x90 [ 1493.745251][T31061] ? clear_bhb_loop+0x40/0x90 [ 1493.749947][T31061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1493.755851][T31061] RIP: 0033:0x7f80fcd9de99 [ 1493.760298][T31061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.779930][T31061] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1493.788357][T31061] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1493.796341][T31061] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1493.804320][T31061] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.812298][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.820284][T31061] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1493.828285][T31061] [ 1494.502182][T31081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8445'. [ 1494.561426][T31081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.770282][T31081] bridge_slave_0 (unregistering): left allmulticast mode [ 1494.781719][T31081] bridge_slave_0 (unregistering): left promiscuous mode [ 1494.792711][T31081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.031051][T31087] netlink: 'syz.2.8445': attribute type 2 has an invalid length. [ 1495.041000][T31087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8445'. [ 1495.418449][T31099] netlink: 'syz.2.8450': attribute type 3 has an invalid length. [ 1495.426962][T31099] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1495.967321][T31124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1496.023315][T31124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.183214][T31124] bridge_slave_0 (unregistering): left allmulticast mode [ 1496.190880][T31124] bridge_slave_0 (unregistering): left promiscuous mode [ 1496.202016][T31124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.456584][T31127] netlink: 'syz.1.8458': attribute type 2 has an invalid length. [ 1496.478674][T31127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1496.837909][T31137] FAULT_INJECTION: forcing a failure. [ 1496.837909][T31137] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.859603][T31137] CPU: 1 PID: 31137 Comm: syz.1.8464 Not tainted syzkaller #0 [ 1496.867175][T31137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1496.877289][T31137] Call Trace: [ 1496.880612][T31137] [ 1496.883582][T31137] dump_stack_lvl+0x18c/0x250 [ 1496.888307][T31137] ? sctp_sendmsg+0x1519/0x27b0 [ 1496.893207][T31137] ? ___sys_sendmsg+0x2a6/0x360 [ 1496.898117][T31137] ? show_regs_print_info+0x20/0x20 [ 1496.903396][T31137] ? load_image+0x420/0x420 [ 1496.907989][T31137] should_fail_ex+0x394/0x4c0 [ 1496.912736][T31137] should_failslab+0x9/0x20 [ 1496.917294][T31137] slab_pre_alloc_hook+0x59/0x300 [ 1496.922382][T31137] ? sctp_add_bind_addr+0x8c/0x360 [ 1496.927554][T31137] __kmem_cache_alloc_node+0x53/0x250 [ 1496.933002][T31137] ? sctp_add_bind_addr+0x8c/0x360 [ 1496.938164][T31137] kmalloc_trace+0x2a/0xe0 [ 1496.942663][T31137] sctp_add_bind_addr+0x8c/0x360 [ 1496.947666][T31137] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1496.953361][T31137] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1496.959137][T31137] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1496.965264][T31137] ? sctp_v4_is_any+0x35/0x60 [ 1496.969989][T31137] ? sctp_copy_one_addr+0x8c/0x350 [ 1496.975151][T31137] sctp_bind_addr_copy+0xb3/0x3c0 [ 1496.980226][T31137] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1496.986628][T31137] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1496.991969][T31137] ? __sctp_connect+0xd80/0xd80 [ 1496.996868][T31137] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1497.002297][T31137] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1497.007901][T31137] ? security_sctp_bind_connect+0x89/0xb0 [ 1497.013685][T31137] sctp_sendmsg+0x1519/0x27b0 [ 1497.018454][T31137] ? sctp_getsockopt+0xb60/0xb60 [ 1497.023475][T31137] ? aa_af_perm+0x330/0x330 [ 1497.028051][T31137] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1497.034540][T31137] ? sock_rps_record_flow+0x19/0x3f0 [ 1497.039871][T31137] ? inet_sendmsg+0xce/0x2a0 [ 1497.044513][T31137] ? inet_send_prepare+0x250/0x250 [ 1497.049701][T31137] ____sys_sendmsg+0x61b/0x980 [ 1497.054534][T31137] ? __asan_memset+0x22/0x40 [ 1497.059175][T31137] ? __sys_sendmsg_sock+0x30/0x30 [ 1497.064250][T31137] ? __import_iovec+0x5f2/0x850 [ 1497.069175][T31137] ? import_iovec+0x73/0xa0 [ 1497.073753][T31137] ___sys_sendmsg+0x2a6/0x360 [ 1497.078495][T31137] ? __sys_sendmsg+0x2b0/0x2b0 [ 1497.083361][T31137] ? __lock_acquire+0x7d80/0x7d80 [ 1497.088487][T31137] __se_sys_sendmsg+0x1d0/0x2c0 [ 1497.093397][T31137] ? __x64_sys_sendmsg+0x80/0x80 [ 1497.098407][T31137] ? lockdep_hardirqs_on+0x98/0x150 [ 1497.103670][T31137] do_syscall_64+0x55/0xb0 [ 1497.108136][T31137] ? clear_bhb_loop+0x40/0x90 [ 1497.112873][T31137] ? clear_bhb_loop+0x40/0x90 [ 1497.117623][T31137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.123573][T31137] RIP: 0033:0x7f80fcd9de99 [ 1497.128041][T31137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.147705][T31137] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.156178][T31137] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1497.164195][T31137] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1497.172212][T31137] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.180220][T31137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.188245][T31137] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1497.196294][T31137] [ 1497.737924][T31162] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1497.758627][T31162] netlink: set zone limit has 4 unknown bytes [ 1497.889316][ T12] tipc: Subscription rejected, illegal request [ 1498.420349][T31180] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8479'. [ 1498.558086][T31182] netlink: zone id is out of range [ 1498.572652][T31182] netlink: set zone limit has 8 unknown bytes [ 1498.603078][T31185] netlink: 'syz.0.8481': attribute type 2 has an invalid length. [ 1499.645537][T31211] netlink: 'syz.2.8489': attribute type 10 has an invalid length. [ 1499.673193][T31211] team0: Device hsr_slave_0 failed to register rx_handler [ 1499.812246][T31219] netlink: 'syz.1.8491': attribute type 10 has an invalid length. [ 1499.937356][T31219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.004705][T31219] bridge_slave_1: left allmulticast mode [ 1500.010882][T31219] bridge_slave_1: left promiscuous mode [ 1500.039110][T31219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.163150][T31219] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1500.527274][T31228] netlink: 'syz.1.8494': attribute type 10 has an invalid length. [ 1500.563130][T31228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1500.605967][T31228] dummy0: entered promiscuous mode [ 1500.624924][T31228] dummy0: entered allmulticast mode [ 1500.653908][T31228] bridge0: port 1(dummy0) entered blocking state [ 1500.685122][T31228] bridge0: port 1(dummy0) entered disabled state [ 1500.710460][T31228] bridge0: port 1(dummy0) entered blocking state [ 1500.716999][T31228] bridge0: port 1(dummy0) entered forwarding state [ 1500.828417][T31236] netlink: 'syz.2.8497': attribute type 29 has an invalid length. [ 1500.853749][T31236] netlink: 'syz.2.8497': attribute type 29 has an invalid length. [ 1500.874109][T31236] netlink: 'syz.2.8497': attribute type 29 has an invalid length. [ 1501.930187][T31253] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1505.302384][T13082] tipc: Subscription rejected, illegal request [ 1505.413369][T31298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1505.539650][T31305] netlink: 'syz.0.8515': attribute type 10 has an invalid length. [ 1505.556210][T31305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8515'. [ 1506.084888][T31320] netlink: 'syz.3.8520': attribute type 10 has an invalid length. [ 1506.128463][T31320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1506.191251][T31320] caif0: entered promiscuous mode [ 1506.223058][T31320] caif0: entered allmulticast mode [ 1506.228438][T31320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.333202][T31319] netlink: 'syz.3.8520': attribute type 10 has an invalid length. [ 1506.341276][T31319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1506.417325][T31319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.580344][T31331] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1506.628747][T31331] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1506.640323][T31332] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1506.654881][T31331] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1506.867196][T31334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8525'. [ 1508.452107][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8538'. [ 1508.674283][T31384] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8541'. [ 1509.182877][T31401] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1509.188541][T31401] dvmrp1: linktype set to 823 [ 1510.384919][T31429] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1510.397718][T31429] netlink: 'syz.2.8558': attribute type 29 has an invalid length. [ 1510.573492][T31438] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8561'. [ 1514.459210][T31456] syzkaller0: entered promiscuous mode [ 1514.464911][T31456] syzkaller0: entered allmulticast mode [ 1514.599858][T13776] tipc: Subscription rejected, illegal request [ 1514.932292][T31476] netlink: 'syz.1.8573': attribute type 3 has an invalid length. [ 1514.934903][T31475] netlink: 'syz.3.8574': attribute type 9 has an invalid length. [ 1514.941368][T31476] netlink: 'syz.1.8573': attribute type 1 has an invalid length. [ 1514.948310][T31475] netlink: 'syz.3.8574': attribute type 23 has an invalid length. [ 1514.948348][T31475] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.8574'. [ 1514.989789][T31476] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1517.327078][T13776] tipc: Subscription rejected, illegal request [ 1518.250604][T31520] netlink: 'syz.0.8587': attribute type 9 has an invalid length. [ 1518.281807][T31520] netlink: 'syz.0.8587': attribute type 23 has an invalid length. [ 1518.302302][T31520] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1518.775117][T31538] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1518.828363][T31538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.902343][T31539] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 1520.011987][T31561] netlink: 'syz.1.8601': attribute type 10 has an invalid length. [ 1520.166601][T31569] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1520.174261][T31567] netlink: 'syz.1.8603': attribute type 9 has an invalid length. [ 1520.185953][T31567] netlink: 'syz.1.8603': attribute type 23 has an invalid length. [ 1520.196230][T31567] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.8603'. [ 1520.259611][T31572] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.8604'. [ 1520.286522][T31572] openvswitch: netlink: Flow key attr not present in new flow. [ 1521.609402][T31601] netlink: 'syz.1.8616': attribute type 21 has an invalid length. [ 1521.634903][T31601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8616'. [ 1521.707006][T31604] netlink: 'syz.1.8616': attribute type 39 has an invalid length. [ 1521.823617][T31604] hsr_slave_1 (unregistering): left promiscuous mode [ 1521.871781][T31601] netlink: 'syz.1.8616': attribute type 39 has an invalid length. [ 1523.357739][T31636] syzkaller0: entered promiscuous mode [ 1523.372597][T31636] syzkaller0: entered allmulticast mode [ 1523.467716][T31646] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1523.467721][T31643] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1523.467747][T31643] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1523.553386][T31646] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1527.419134][T31715] FAULT_INJECTION: forcing a failure. [ 1527.419134][T31715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.441656][T31715] CPU: 1 PID: 31715 Comm: syz.0.8652 Not tainted syzkaller #0 [ 1527.449179][T31715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1527.459274][T31715] Call Trace: [ 1527.462579][T31715] [ 1527.465533][T31715] dump_stack_lvl+0x18c/0x250 [ 1527.470256][T31715] ? show_regs_print_info+0x20/0x20 [ 1527.475499][T31715] ? load_image+0x420/0x420 [ 1527.480054][T31715] ? __lock_acquire+0x7d80/0x7d80 [ 1527.485146][T31715] ? snprintf+0xe9/0x140 [ 1527.489431][T31715] should_fail_ex+0x394/0x4c0 [ 1527.494181][T31715] _copy_to_user+0x2f/0xa0 [ 1527.498634][T31715] simple_read_from_buffer+0xe7/0x150 [ 1527.504046][T31715] proc_fail_nth_read+0x1e8/0x260 [ 1527.509113][T31715] ? proc_fault_inject_write+0x360/0x360 [ 1527.514791][T31715] ? fsnotify_perm+0x271/0x5e0 [ 1527.519600][T31715] ? proc_fault_inject_write+0x360/0x360 [ 1527.525275][T31715] vfs_read+0x298/0x990 [ 1527.529503][T31715] ? kernel_read+0x1e0/0x1e0 [ 1527.534144][T31715] ? __fget_files+0x28/0x460 [ 1527.538773][T31715] ? __fget_files+0x3fc/0x460 [ 1527.543497][T31715] ? __fdget_pos+0x2a3/0x330 [ 1527.548128][T31715] ? ksys_read+0x74/0x260 [ 1527.552536][T31715] ksys_read+0x151/0x260 [ 1527.556824][T31715] ? vfs_write+0x9a0/0x9a0 [ 1527.561291][T31715] ? lockdep_hardirqs_on+0x98/0x150 [ 1527.566530][T31715] do_syscall_64+0x55/0xb0 [ 1527.570982][T31715] ? clear_bhb_loop+0x40/0x90 [ 1527.575692][T31715] ? clear_bhb_loop+0x40/0x90 [ 1527.580403][T31715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1527.586331][T31715] RIP: 0033:0x7fa11df5e6ce [ 1527.590781][T31715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1527.610412][T31715] RSP: 002b:00007fa11edf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1527.618867][T31715] RAX: ffffffffffffffda RBX: 00007fa11edf26c0 RCX: 00007fa11df5e6ce [ 1527.626887][T31715] RDX: 000000000000000f RSI: 00007fa11edf20a0 RDI: 000000000000000b [ 1527.634891][T31715] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.642889][T31715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.650890][T31715] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1527.658945][T31715] [ 1527.986329][T31725] syzkaller0: entered promiscuous mode [ 1527.995216][T31725] syzkaller0: entered allmulticast mode [ 1529.558922][T31769] netlink: 'syz.2.8669': attribute type 10 has an invalid length. [ 1529.579467][T31769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1529.602783][T31769] dummy0: entered promiscuous mode [ 1529.620194][T31769] bridge0: port 1(dummy0) entered blocking state [ 1529.653980][T31769] bridge0: port 1(dummy0) entered disabled state [ 1529.664916][T31769] dummy0: entered allmulticast mode [ 1529.735368][T31769] bridge0: port 1(dummy0) entered blocking state [ 1529.742044][T31769] bridge0: port 1(dummy0) entered forwarding state [ 1529.752558][T31770] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1529.774769][T31770] openvswitch: netlink: Duplicate key (type 0). [ 1530.169550][T31781] FAULT_INJECTION: forcing a failure. [ 1530.169550][T31781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.203145][T31781] CPU: 1 PID: 31781 Comm: syz.0.8673 Not tainted syzkaller #0 [ 1530.210685][T31781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1530.220789][T31781] Call Trace: [ 1530.224116][T31781] [ 1530.227113][T31781] dump_stack_lvl+0x18c/0x250 [ 1530.231846][T31781] ? show_regs_print_info+0x20/0x20 [ 1530.237122][T31781] ? load_image+0x420/0x420 [ 1530.241687][T31781] ? __might_fault+0xaa/0x120 [ 1530.246415][T31781] ? __lock_acquire+0x7d80/0x7d80 [ 1530.251500][T31781] should_fail_ex+0x394/0x4c0 [ 1530.256232][T31781] _copy_from_user+0x2f/0xe0 [ 1530.260864][T31781] ___sys_sendmsg+0x1c7/0x360 [ 1530.265584][T31781] ? get_pid_task+0x20/0x1e0 [ 1530.270237][T31781] ? __sys_sendmsg+0x2b0/0x2b0 [ 1530.275088][T31781] ? __lock_acquire+0x7d80/0x7d80 [ 1530.280202][T31781] __se_sys_sendmsg+0x1d0/0x2c0 [ 1530.285099][T31781] ? __x64_sys_sendmsg+0x80/0x80 [ 1530.290101][T31781] ? lockdep_hardirqs_on+0x98/0x150 [ 1530.295345][T31781] do_syscall_64+0x55/0xb0 [ 1530.299804][T31781] ? clear_bhb_loop+0x40/0x90 [ 1530.304786][T31781] ? clear_bhb_loop+0x40/0x90 [ 1530.309530][T31781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1530.315468][T31781] RIP: 0033:0x7fa11df9de99 [ 1530.319920][T31781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.339557][T31781] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1530.348020][T31781] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1530.356041][T31781] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1530.364046][T31781] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.372072][T31781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.380080][T31781] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1530.388124][T31781] [ 1534.289061][T31817] netlink: 'syz.1.8686': attribute type 10 has an invalid length. [ 1534.312992][T31817] netlink: 'syz.1.8686': attribute type 4 has an invalid length. [ 1534.320788][T31817] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1534.405415][T31823] netlink: 'syz.0.8688': attribute type 10 has an invalid length. [ 1534.459236][T31823] bridge_slave_1: left allmulticast mode [ 1534.465464][T31823] bridge_slave_1: left promiscuous mode [ 1534.474327][T31823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.549890][T31827] netlink: 'syz.1.8686': attribute type 3 has an invalid length. [ 1534.579083][T31823] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1534.626935][T31827] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1534.795835][T31829] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8689'. [ 1535.002439][T31834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1535.371828][T31841] netlink: 'syz.1.8694': attribute type 4 has an invalid length. [ 1535.414944][T31841] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1535.489289][T31841] .`: renamed from bond0 (while UP) [ 1536.222069][T31853] netlink: 'syz.2.8697': attribute type 2 has an invalid length. [ 1536.252864][T31853] netlink: 'syz.2.8697': attribute type 8 has an invalid length. [ 1536.271098][T31853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8697'. [ 1536.620457][T31870] netlink: 'syz.0.8700': attribute type 3 has an invalid length. [ 1536.630483][T31870] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.8700'. [ 1536.852321][T31874] FAULT_INJECTION: forcing a failure. [ 1536.852321][T31874] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.872470][T31874] CPU: 0 PID: 31874 Comm: syz.2.8701 Not tainted syzkaller #0 [ 1536.880019][T31874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1536.890133][T31874] Call Trace: [ 1536.893466][T31874] [ 1536.896441][T31874] dump_stack_lvl+0x18c/0x250 [ 1536.901182][T31874] ? show_regs_print_info+0x20/0x20 [ 1536.906438][T31874] ? load_image+0x420/0x420 [ 1536.911015][T31874] ? __might_sleep+0xe0/0xe0 [ 1536.915671][T31874] ? __lock_acquire+0x7d80/0x7d80 [ 1536.920759][T31874] should_fail_ex+0x394/0x4c0 [ 1536.925487][T31874] should_failslab+0x9/0x20 [ 1536.930040][T31874] slab_pre_alloc_hook+0x59/0x300 [ 1536.935122][T31874] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1536.940900][T31874] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1536.946671][T31874] __kmem_cache_alloc_node+0x53/0x250 [ 1536.952088][T31874] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1536.957876][T31874] __kmalloc+0xa7/0x240 [ 1536.962078][T31874] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1536.967675][T31874] ? tomoyo_domain+0xd6/0x120 [ 1536.972399][T31874] tomoyo_path_number_perm+0x248/0x5e0 [ 1536.977908][T31874] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1536.983576][T31874] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1536.989066][T31874] ? ksys_write+0x1d2/0x260 [ 1536.993644][T31874] ? __fget_files+0x28/0x460 [ 1536.998283][T31874] security_file_ioctl+0x70/0xa0 [ 1537.003261][T31874] __se_sys_ioctl+0x48/0x170 [ 1537.007891][T31874] do_syscall_64+0x55/0xb0 [ 1537.012336][T31874] ? clear_bhb_loop+0x40/0x90 [ 1537.017046][T31874] ? clear_bhb_loop+0x40/0x90 [ 1537.021757][T31874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1537.027678][T31874] RIP: 0033:0x7f149df9de99 [ 1537.032128][T31874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.051780][T31874] RSP: 002b:00007f149ee58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1537.060224][T31874] RAX: ffffffffffffffda RBX: 00007f149e226090 RCX: 00007f149df9de99 [ 1537.068226][T31874] RDX: 00002000000003c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1537.076241][T31874] RBP: 00007f149ee58090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.084240][T31874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.092250][T31874] R13: 00007f149e226128 R14: 00007f149e226090 R15: 00007ffd1e817a28 [ 1537.100284][T31874] [ 1537.112503][T31874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1538.504578][T31906] FAULT_INJECTION: forcing a failure. [ 1538.504578][T31906] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.581926][T31906] CPU: 1 PID: 31906 Comm: syz.1.8712 Not tainted syzkaller #0 [ 1538.589448][T31906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1538.599534][T31906] Call Trace: [ 1538.602840][T31906] [ 1538.605807][T31906] dump_stack_lvl+0x18c/0x250 [ 1538.610527][T31906] ? show_regs_print_info+0x20/0x20 [ 1538.615759][T31906] ? load_image+0x420/0x420 [ 1538.620308][T31906] ? __might_sleep+0xe0/0xe0 [ 1538.624936][T31906] ? __lock_acquire+0x7d80/0x7d80 [ 1538.630019][T31906] should_fail_ex+0x394/0x4c0 [ 1538.634776][T31906] should_failslab+0x9/0x20 [ 1538.639343][T31906] slab_pre_alloc_hook+0x59/0x300 [ 1538.644410][T31906] ? apparmor_sk_alloc_security+0x77/0x100 [ 1538.650253][T31906] __kmem_cache_alloc_node+0x53/0x250 [ 1538.655666][T31906] ? apparmor_sk_alloc_security+0x77/0x100 [ 1538.661518][T31906] kmalloc_trace+0x2a/0xe0 [ 1538.665974][T31906] apparmor_sk_alloc_security+0x77/0x100 [ 1538.671640][T31906] security_sk_alloc+0x6e/0xa0 [ 1538.676438][T31906] sk_prot_alloc+0x101/0x210 [ 1538.681078][T31906] ? sk_alloc+0x24/0x350 [ 1538.685371][T31906] sk_alloc+0x3a/0x350 [ 1538.689481][T31906] ? bpf_ctx_init+0x154/0x190 [ 1538.694200][T31906] bpf_prog_test_run_skb+0x371/0x18f0 [ 1538.699625][T31906] ? __fget_files+0x28/0x460 [ 1538.704266][T31906] ? __fget_files+0x3fc/0x460 [ 1538.708998][T31906] ? cpu_online+0x60/0x60 [ 1538.713367][T31906] bpf_prog_test_run+0x31f/0x390 [ 1538.718343][T31906] __sys_bpf+0x49d/0x890 [ 1538.722623][T31906] ? bpf_link_show_fdinfo+0x390/0x390 [ 1538.728060][T31906] ? __sys_bpf+0x5/0x890 [ 1538.732352][T31906] __x64_sys_bpf+0x7c/0x90 [ 1538.736803][T31906] do_syscall_64+0x55/0xb0 [ 1538.741254][T31906] ? clear_bhb_loop+0x40/0x90 [ 1538.745969][T31906] ? clear_bhb_loop+0x40/0x90 [ 1538.750533][T31912] mac80211_hwsim hwsim81 wlan1: entered promiscuous mode [ 1538.750750][T31906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1538.763700][T31906] RIP: 0033:0x7f80fcd9de99 [ 1538.768147][T31906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.785127][T31912] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode [ 1538.787786][T31906] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1538.787816][T31906] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1538.811348][T31906] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 1538.819347][T31906] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.827353][T31906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.835356][T31906] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1538.843372][T31906] [ 1540.287847][T31929] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8717'. [ 1540.745590][T31939] netlink: 'syz.2.8722': attribute type 21 has an invalid length. [ 1541.796108][T31961] FAULT_INJECTION: forcing a failure. [ 1541.796108][T31961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.835505][T31961] CPU: 1 PID: 31961 Comm: syz.0.8727 Not tainted syzkaller #0 [ 1541.843048][T31961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1541.853152][T31961] Call Trace: [ 1541.856479][T31961] [ 1541.859465][T31961] dump_stack_lvl+0x18c/0x250 [ 1541.864214][T31961] ? show_regs_print_info+0x20/0x20 [ 1541.869477][T31961] ? load_image+0x420/0x420 [ 1541.874056][T31961] ? __lock_acquire+0x7d80/0x7d80 [ 1541.879123][T31961] ? aa_sk_perm+0x970/0x970 [ 1541.883699][T31961] should_fail_ex+0x394/0x4c0 [ 1541.888450][T31961] _copy_from_user+0x2f/0xe0 [ 1541.893098][T31961] copy_from_sockptr+0x69/0x80 [ 1541.897934][T31961] packet_setsockopt+0xbff/0x1500 [ 1541.903039][T31961] ? packet_ioctl+0x350/0x350 [ 1541.907827][T31961] ? aa_sk_perm+0x83c/0x970 [ 1541.912411][T31961] ? __fget_files+0x28/0x460 [ 1541.917118][T31961] ? aa_af_perm+0x330/0x330 [ 1541.921717][T31961] ? __fget_files+0x28/0x460 [ 1541.926376][T31961] ? aa_sock_opt_perm+0x74/0x100 [ 1541.931372][T31961] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1541.936970][T31961] ? security_socket_setsockopt+0x7e/0xa0 [ 1541.942774][T31961] ? packet_ioctl+0x350/0x350 [ 1541.947531][T31961] do_sock_setsockopt+0x175/0x1a0 [ 1541.952620][T31961] ? __fdget+0x180/0x210 [ 1541.956934][T31961] __x64_sys_setsockopt+0x182/0x200 [ 1541.962208][T31961] do_syscall_64+0x55/0xb0 [ 1541.966674][T31961] ? clear_bhb_loop+0x40/0x90 [ 1541.971425][T31961] ? clear_bhb_loop+0x40/0x90 [ 1541.976165][T31961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.982108][T31961] RIP: 0033:0x7fa11df9de99 [ 1541.986573][T31961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.006253][T31961] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1542.014725][T31961] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1542.022743][T31961] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000007 [ 1542.030770][T31961] RBP: 00007fa11edf2090 R08: 0000000000000008 R09: 0000000000000000 [ 1542.038790][T31961] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1542.046826][T31961] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1542.054901][T31961] [ 1543.041466][T31985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8734'. [ 1543.069447][T31985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8734'. [ 1543.092284][T31985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8734'. [ 1543.447900][T31999] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8738'. [ 1543.475438][T31999] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1543.765493][T31997] netlink: 'syz.2.8738': attribute type 1 has an invalid length. [ 1543.821888][T31999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.842807][T31999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.887258][T31999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.964645][T31999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.104538][T32004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8740'. [ 1544.148449][T32004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8740'. [ 1544.162493][T32004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8740'. [ 1544.187392][T32006] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8741'. [ 1544.201097][T32006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1544.309930][T32010] netlink: 'syz.3.8742': attribute type 3 has an invalid length. [ 1544.440858][T32018] FAULT_INJECTION: forcing a failure. [ 1544.440858][T32018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.454880][T32018] CPU: 0 PID: 32018 Comm: syz.3.8745 Not tainted syzkaller #0 [ 1544.462382][T32018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1544.472463][T32018] Call Trace: [ 1544.475770][T32018] [ 1544.478725][T32018] dump_stack_lvl+0x18c/0x250 [ 1544.483438][T32018] ? show_regs_print_info+0x20/0x20 [ 1544.488670][T32018] ? load_image+0x420/0x420 [ 1544.493216][T32018] ? __might_fault+0xaa/0x120 [ 1544.497930][T32018] ? __lock_acquire+0x7d80/0x7d80 [ 1544.502989][T32018] ? __virt_addr_valid+0x10c/0x380 [ 1544.508131][T32018] should_fail_ex+0x394/0x4c0 [ 1544.512835][T32018] _copy_from_user+0x2f/0xe0 [ 1544.517449][T32018] bpf_prog_test_run_xdp+0xd93/0x1140 [ 1544.522849][T32018] ? lock_chain_count+0x20/0x20 [ 1544.527727][T32018] ? dev_put+0x80/0x80 [ 1544.531840][T32018] ? bpf_prog_test_run+0x254/0x390 [ 1544.536999][T32018] ? dev_put+0x80/0x80 [ 1544.541126][T32018] bpf_prog_test_run+0x31f/0x390 [ 1544.546087][T32018] __sys_bpf+0x49d/0x890 [ 1544.550337][T32018] ? read_tsc+0x9/0x20 [ 1544.554425][T32018] ? bpf_link_show_fdinfo+0x390/0x390 [ 1544.559822][T32018] ? lock_chain_count+0x20/0x20 [ 1544.564687][T32018] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1544.570689][T32018] __x64_sys_bpf+0x7c/0x90 [ 1544.575121][T32018] do_syscall_64+0x55/0xb0 [ 1544.579550][T32018] ? clear_bhb_loop+0x40/0x90 [ 1544.584243][T32018] ? clear_bhb_loop+0x40/0x90 [ 1544.588934][T32018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.594836][T32018] RIP: 0033:0x7f4f2b59de99 [ 1544.599265][T32018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.618890][T32018] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1544.627338][T32018] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1544.635334][T32018] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1544.643322][T32018] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.651308][T32018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.659287][T32018] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1544.667308][T32018] [ 1545.832960][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.839522][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.257652][T32062] FAULT_INJECTION: forcing a failure. [ 1546.257652][T32062] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.288738][T32062] CPU: 1 PID: 32062 Comm: syz.0.8757 Not tainted syzkaller #0 [ 1546.296260][T32062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1546.306357][T32062] Call Trace: [ 1546.309664][T32062] [ 1546.312643][T32062] dump_stack_lvl+0x18c/0x250 [ 1546.317376][T32062] ? show_regs_print_info+0x20/0x20 [ 1546.322618][T32062] ? load_image+0x420/0x420 [ 1546.327172][T32062] ? __lock_acquire+0x7d80/0x7d80 [ 1546.332249][T32062] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1546.338438][T32062] ? __lock_acquire+0x1262/0x7d80 [ 1546.343513][T32062] should_fail_ex+0x394/0x4c0 [ 1546.348250][T32062] should_failslab+0x9/0x20 [ 1546.352798][T32062] slab_pre_alloc_hook+0x59/0x300 [ 1546.357862][T32062] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1546.363416][T32062] __kmem_cache_alloc_node+0x53/0x250 [ 1546.368808][T32062] ? __inet_diag_dump_start+0x8b/0x9f0 [ 1546.374277][T32062] kmalloc_trace+0x2a/0xe0 [ 1546.378711][T32062] __inet_diag_dump_start+0x8b/0x9f0 [ 1546.384013][T32062] ? netlink_lookup+0x30/0x200 [ 1546.388797][T32062] ? netlink_lookup+0x30/0x200 [ 1546.393607][T32062] __netlink_dump_start+0x43c/0x7a0 [ 1546.398831][T32062] inet_diag_rcv_msg_compat+0x215/0x440 [ 1546.404397][T32062] ? __inet_diag_dump+0x380/0x380 [ 1546.409439][T32062] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1546.414498][T32062] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1546.420239][T32062] ? inet_diag_dump_start_compat+0x20/0x20 [ 1546.426065][T32062] ? inet_diag_dump+0x50/0x50 [ 1546.430763][T32062] ? __inet_diag_dump+0x380/0x380 [ 1546.435799][T32062] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1546.440770][T32062] netlink_rcv_skb+0x235/0x4c0 [ 1546.445571][T32062] ? sock_diag_bind+0xb0/0xb0 [ 1546.450270][T32062] ? netlink_ack+0x1160/0x1160 [ 1546.455066][T32062] ? __lock_acquire+0x7d80/0x7d80 [ 1546.460117][T32062] ? netlink_deliver_tap+0x2e/0x1b0 [ 1546.465337][T32062] sock_diag_rcv+0x2a/0x40 [ 1546.469771][T32062] netlink_unicast+0x7b1/0x930 [ 1546.474567][T32062] netlink_sendmsg+0x8d0/0xbf0 [ 1546.479352][T32062] ? netlink_getsockopt+0x590/0x590 [ 1546.484574][T32062] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1546.490167][T32062] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1546.495522][T32062] ? security_socket_sendmsg+0x80/0xa0 [ 1546.501125][T32062] ? netlink_getsockopt+0x590/0x590 [ 1546.506363][T32062] ____sys_sendmsg+0x61b/0x980 [ 1546.511180][T32062] ? __asan_memset+0x22/0x40 [ 1546.515805][T32062] ? __sys_sendmsg_sock+0x30/0x30 [ 1546.520853][T32062] ? __import_iovec+0x5f2/0x850 [ 1546.525731][T32062] ? import_iovec+0x73/0xa0 [ 1546.530256][T32062] ___sys_sendmsg+0x2a6/0x360 [ 1546.534946][T32062] ? get_pid_task+0x20/0x1e0 [ 1546.539582][T32062] ? __sys_sendmsg+0x2b0/0x2b0 [ 1546.544382][T32062] ? __lock_acquire+0x7d80/0x7d80 [ 1546.549455][T32062] __se_sys_sendmsg+0x1d0/0x2c0 [ 1546.554336][T32062] ? __x64_sys_sendmsg+0x80/0x80 [ 1546.559313][T32062] ? lockdep_hardirqs_on+0x98/0x150 [ 1546.564536][T32062] do_syscall_64+0x55/0xb0 [ 1546.568970][T32062] ? clear_bhb_loop+0x40/0x90 [ 1546.573668][T32062] ? clear_bhb_loop+0x40/0x90 [ 1546.578365][T32062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.584275][T32062] RIP: 0033:0x7fa11df9de99 [ 1546.588720][T32062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.608345][T32062] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.616780][T32062] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1546.624854][T32062] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1546.632867][T32062] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.640850][T32062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.648841][T32062] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1546.656852][T32062] [ 1546.853865][T32072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1546.898606][T32072] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1546.922728][T32072] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1546.942142][T32072] netlink: 'syz.3.8761': attribute type 2 has an invalid length. [ 1546.950465][T32072] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1548.081622][T32112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8778'. [ 1548.091093][T32112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8778'. [ 1548.123534][T32112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8778'. [ 1548.165671][T32112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8778'. [ 1548.480775][T32125] FAULT_INJECTION: forcing a failure. [ 1548.480775][T32125] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.496343][T32125] CPU: 0 PID: 32125 Comm: syz.2.8784 Not tainted syzkaller #0 [ 1548.503841][T32125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1548.513938][T32125] Call Trace: [ 1548.517248][T32125] [ 1548.520208][T32125] dump_stack_lvl+0x18c/0x250 [ 1548.524923][T32125] ? show_regs_print_info+0x20/0x20 [ 1548.530167][T32125] ? load_image+0x420/0x420 [ 1548.534708][T32125] ? __might_sleep+0xe0/0xe0 [ 1548.539330][T32125] ? __lock_acquire+0x7d80/0x7d80 [ 1548.544393][T32125] should_fail_ex+0x394/0x4c0 [ 1548.549117][T32125] should_failslab+0x9/0x20 [ 1548.553684][T32125] slab_pre_alloc_hook+0x59/0x300 [ 1548.558790][T32125] ? tomoyo_encode+0x2ad/0x570 [ 1548.563594][T32125] ? tomoyo_encode+0x2ad/0x570 [ 1548.568393][T32125] __kmem_cache_alloc_node+0x53/0x250 [ 1548.573809][T32125] ? tomoyo_encode+0x2ad/0x570 [ 1548.578606][T32125] __kmalloc+0xa7/0x240 [ 1548.582797][T32125] tomoyo_encode+0x2ad/0x570 [ 1548.587434][T32125] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1548.593124][T32125] ? tomoyo_domain+0xd6/0x120 [ 1548.597856][T32125] tomoyo_path_number_perm+0x248/0x5e0 [ 1548.603357][T32125] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1548.609025][T32125] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1548.614521][T32125] ? trace_call_bpf+0xc3/0x6c0 [ 1548.619333][T32125] ? trace_call_bpf+0xc3/0x6c0 [ 1548.624123][T32125] ? trace_call_bpf+0x5e9/0x6c0 [ 1548.629052][T32125] ? __fget_files+0x28/0x460 [ 1548.633712][T32125] security_file_ioctl+0x70/0xa0 [ 1548.638688][T32125] __se_sys_ioctl+0x48/0x170 [ 1548.643318][T32125] do_syscall_64+0x55/0xb0 [ 1548.647777][T32125] ? clear_bhb_loop+0x40/0x90 [ 1548.652494][T32125] ? clear_bhb_loop+0x40/0x90 [ 1548.657219][T32125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1548.663156][T32125] RIP: 0033:0x7f149df9de99 [ 1548.667604][T32125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.687249][T32125] RSP: 002b:00007f149ee79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.695707][T32125] RAX: ffffffffffffffda RBX: 00007f149e225fa0 RCX: 00007f149df9de99 [ 1548.703709][T32125] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 000000000000000c [ 1548.711718][T32125] RBP: 00007f149ee79090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.719722][T32125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.727718][T32125] R13: 00007f149e226038 R14: 00007f149e225fa0 R15: 00007ffd1e817a28 [ 1548.735725][T32125] [ 1548.757328][T32125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1549.318304][T32148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8794'. [ 1549.330060][T32148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8794'. [ 1549.742739][T32159] netlink: 'syz.3.8796': attribute type 10 has an invalid length. [ 1553.688915][T13782] tipc: Subscription rejected, illegal request [ 1555.485702][T32219] syzkaller0: entered promiscuous mode [ 1555.491359][T32219] syzkaller0: entered allmulticast mode [ 1555.550161][T32238] netlink: 'syz.3.8822': attribute type 3 has an invalid length. [ 1555.559529][T32238] __nla_validate_parse: 5 callbacks suppressed [ 1555.559563][T32238] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8822'. [ 1557.490317][T13776] tipc: Subscription rejected, illegal request [ 1557.615625][T32261] FAULT_INJECTION: forcing a failure. [ 1557.615625][T32261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.635903][T32261] CPU: 0 PID: 32261 Comm: syz.1.8830 Not tainted syzkaller #0 [ 1557.643407][T32261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1557.653490][T32261] Call Trace: [ 1557.656798][T32261] [ 1557.659759][T32261] dump_stack_lvl+0x18c/0x250 [ 1557.664490][T32261] ? show_regs_print_info+0x20/0x20 [ 1557.669724][T32261] ? load_image+0x420/0x420 [ 1557.674263][T32261] ? __might_fault+0xaa/0x120 [ 1557.678978][T32261] ? __lock_acquire+0x7d80/0x7d80 [ 1557.684052][T32261] ? unix_ioctl+0x259/0x6b0 [ 1557.688602][T32261] should_fail_ex+0x394/0x4c0 [ 1557.693335][T32261] _copy_from_user+0x2f/0xe0 [ 1557.697973][T32261] sock_do_ioctl+0x190/0x310 [ 1557.702607][T32261] ? sock_show_fdinfo+0xb0/0xb0 [ 1557.707515][T32261] sock_ioctl+0x5be/0x7e0 [ 1557.711894][T32261] ? sock_poll+0x3e0/0x3e0 [ 1557.716362][T32261] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1557.721353][T32261] ? security_file_ioctl+0x80/0xa0 [ 1557.726509][T32261] ? sock_poll+0x3e0/0x3e0 [ 1557.730958][T32261] __se_sys_ioctl+0xfd/0x170 [ 1557.735584][T32261] do_syscall_64+0x55/0xb0 [ 1557.740032][T32261] ? clear_bhb_loop+0x40/0x90 [ 1557.744735][T32261] ? clear_bhb_loop+0x40/0x90 [ 1557.749456][T32261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.755379][T32261] RIP: 0033:0x7f80fcd9de99 [ 1557.759848][T32261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.779497][T32261] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.787959][T32261] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1557.795970][T32261] RDX: 0000200000000080 RSI: 0000000000008932 RDI: 000000000000000a [ 1557.803974][T32261] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.811988][T32261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.820036][T32261] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1557.828058][T32261] [ 1558.092194][T32267] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.8831'. [ 1558.277205][T32267] netlink: zone id is out of range [ 1558.330957][T32267] netlink: zone id is out of range [ 1558.362154][T32267] netlink: zone id is out of range [ 1558.406839][T32267] netlink: zone id is out of range [ 1558.452366][T32267] netlink: zone id is out of range [ 1558.518326][T32267] netlink: zone id is out of range [ 1558.593075][T32267] netlink: zone id is out of range [ 1558.645508][T32267] netlink: zone id is out of range [ 1558.822893][T32267] netlink: zone id is out of range [ 1558.911632][T32267] netlink: zone id is out of range [ 1559.193664][T32282] sit0: entered allmulticast mode [ 1559.230475][T32280] sit0: entered promiscuous mode [ 1559.444883][T13782] tipc: Subscription rejected, illegal request [ 1561.028999][ T3432] tipc: Subscription rejected, illegal request [ 1561.679615][T32352] FAULT_INJECTION: forcing a failure. [ 1561.679615][T32352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.713897][T32352] CPU: 1 PID: 32352 Comm: syz.1.8864 Not tainted syzkaller #0 [ 1561.721412][T32352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1561.731495][T32352] Call Trace: [ 1561.734807][T32352] [ 1561.737770][T32352] dump_stack_lvl+0x18c/0x250 [ 1561.742489][T32352] ? show_regs_print_info+0x20/0x20 [ 1561.747757][T32352] ? load_image+0x420/0x420 [ 1561.752320][T32352] ? __might_fault+0xaa/0x120 [ 1561.757045][T32352] ? __lock_acquire+0x7d80/0x7d80 [ 1561.762117][T32352] should_fail_ex+0x394/0x4c0 [ 1561.766834][T32352] _copy_from_iter+0x1cd/0x1290 [ 1561.771731][T32352] ? copyout_mc+0x70/0x70 [ 1561.776102][T32352] ? __virt_addr_valid+0x10c/0x380 [ 1561.781280][T32352] ? __virt_addr_valid+0x10c/0x380 [ 1561.786455][T32352] ? __virt_addr_valid+0x10c/0x380 [ 1561.791610][T32352] ? __check_object_size+0x4fc/0xa40 [ 1561.796930][T32352] tipc_msg_build+0x87a/0xe60 [ 1561.801660][T32352] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1561.807875][T32352] ? tipc_group_bc_cong+0x15c/0x210 [ 1561.813134][T32352] tipc_send_group_bcast+0x7d8/0xad0 [ 1561.818481][T32352] ? tipc_wait_for_connect+0x650/0x650 [ 1561.823996][T32352] ? wait_woken+0x180/0x180 [ 1561.828538][T32352] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1561.834672][T32352] __tipc_sendmsg+0x314/0x2b20 [ 1561.839485][T32352] ? __lock_acquire+0x1336/0x7d80 [ 1561.844560][T32352] ? rht_unlock+0x1d0/0x1d0 [ 1561.849125][T32352] ? verify_lock_unused+0x140/0x140 [ 1561.854357][T32352] ? verify_lock_unused+0x140/0x140 [ 1561.859593][T32352] ? kernel_text_address+0xa0/0xd0 [ 1561.864754][T32352] ? __might_sleep+0xe0/0xe0 [ 1561.869417][T32352] ? mark_lock+0x94/0x320 [ 1561.873821][T32352] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1561.879898][T32352] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1561.885332][T32352] ? lockdep_hardirqs_on+0x98/0x150 [ 1561.890583][T32352] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1561.895986][T32352] ? _local_bh_enable+0xa0/0xa0 [ 1561.900873][T32352] tipc_sendmsg+0x55/0x70 [ 1561.905236][T32352] sock_write_iter+0x2dc/0x420 [ 1561.910042][T32352] ? sock_read_iter+0x3f0/0x3f0 [ 1561.914930][T32352] ? common_file_perm+0x198/0x1f0 [ 1561.919992][T32352] vfs_write+0x474/0x9a0 [ 1561.924281][T32352] ? file_end_write+0x250/0x250 [ 1561.929165][T32352] ? __fget_files+0x3fc/0x460 [ 1561.933874][T32352] ? __fdget_pos+0x1d8/0x330 [ 1561.938490][T32352] ? ksys_write+0x74/0x260 [ 1561.942930][T32352] ksys_write+0x151/0x260 [ 1561.947309][T32352] ? __ia32_sys_read+0x90/0x90 [ 1561.952118][T32352] ? lockdep_hardirqs_on+0x98/0x150 [ 1561.957356][T32352] do_syscall_64+0x55/0xb0 [ 1561.961798][T32352] ? clear_bhb_loop+0x40/0x90 [ 1561.966498][T32352] ? clear_bhb_loop+0x40/0x90 [ 1561.971198][T32352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1561.977129][T32352] RIP: 0033:0x7f80fcd9de99 [ 1561.981580][T32352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.001215][T32352] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1562.009677][T32352] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1562.017676][T32352] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 1562.025669][T32352] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.033655][T32352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.041637][T32352] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1562.049644][T32352] [ 1562.907329][T32370] netlink: 'syz.3.8860': attribute type 21 has an invalid length. [ 1562.917690][T32370] netlink: 'syz.3.8860': attribute type 1 has an invalid length. [ 1562.930200][T32370] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1563.286956][T13774] tipc: Subscription rejected, illegal request [ 1563.474681][T32383] netlink: 'syz.3.8865': attribute type 21 has an invalid length. [ 1563.509535][T32383] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.8865'. [ 1563.717686][T32389] FAULT_INJECTION: forcing a failure. [ 1563.717686][T32389] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.731044][T32389] CPU: 0 PID: 32389 Comm: syz.3.8866 Not tainted syzkaller #0 [ 1563.738539][T32389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1563.748665][T32389] Call Trace: [ 1563.751984][T32389] [ 1563.754939][T32389] dump_stack_lvl+0x18c/0x250 [ 1563.759659][T32389] ? show_regs_print_info+0x20/0x20 [ 1563.764895][T32389] ? load_image+0x420/0x420 [ 1563.769460][T32389] should_fail_ex+0x394/0x4c0 [ 1563.774186][T32389] should_failslab+0x9/0x20 [ 1563.778759][T32389] slab_pre_alloc_hook+0x59/0x300 [ 1563.783850][T32389] ? ip6_pol_route+0x171/0x1230 [ 1563.788790][T32389] kmem_cache_alloc+0x5a/0x2c0 [ 1563.793577][T32389] ? dst_alloc+0x105/0x170 [ 1563.798036][T32389] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 1563.803698][T32389] dst_alloc+0x105/0x170 [ 1563.807966][T32389] ip6_pol_route+0x94f/0x1230 [ 1563.812666][T32389] ? ip6_pol_route+0x171/0x1230 [ 1563.817548][T32389] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 1563.823232][T32389] ? fib6_get_table+0x39/0x260 [ 1563.828017][T32389] ? fib6_get_table+0x251/0x260 [ 1563.832889][T32389] ? skb_header_pointer+0x120/0x120 [ 1563.838114][T32389] fib6_rule_action+0x1d2/0x6c0 [ 1563.843111][T32389] fib_rules_lookup+0x593/0xb10 [ 1563.848014][T32389] ? fib_rules_lookup+0x8e/0xb10 [ 1563.852979][T32389] ? fib_rules_unregister+0x330/0x330 [ 1563.858386][T32389] ? l3mdev_update_flow+0x4b1/0x5f0 [ 1563.863600][T32389] fib6_rule_lookup+0x1ae/0x580 [ 1563.868469][T32389] ? skb_header_pointer+0x120/0x120 [ 1563.873780][T32389] ? fib6_lookup+0x2d0/0x2d0 [ 1563.878389][T32389] ? read_lock_is_recursive+0x20/0x20 [ 1563.883775][T32389] ? skb_header_pointer+0x120/0x120 [ 1563.889003][T32389] ip6_route_output_flags+0x364/0x5d0 [ 1563.894387][T32389] ? ip6_route_output_flags+0x2e/0x5d0 [ 1563.899861][T32389] ip6_dst_lookup_tail+0x1a5/0x1660 [ 1563.905085][T32389] ? sk_dst_check+0x25/0x430 [ 1563.909693][T32389] ? ip6_dst_lookup+0x60/0x60 [ 1563.914387][T32389] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1563.920563][T32389] ? sk_dst_check+0x25/0x430 [ 1563.925167][T32389] ? sk_dst_check+0x2f3/0x430 [ 1563.929867][T32389] ip6_sk_dst_lookup_flow+0x725/0x960 [ 1563.935286][T32389] ? udpv6_sendmsg+0x161b/0x2350 [ 1563.940260][T32389] udpv6_sendmsg+0x1852/0x2350 [ 1563.945043][T32389] ? release_sock+0x2f/0x1c0 [ 1563.949656][T32389] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1563.954519][T32389] ? udp_v6_early_demux+0xf90/0xf90 [ 1563.959741][T32389] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1563.965747][T32389] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1563.971126][T32389] ? _local_bh_enable+0xa0/0xa0 [ 1563.975987][T32389] ? inet_send_prepare+0x1ae/0x250 [ 1563.981118][T32389] ? inet_send_prepare+0x1ae/0x250 [ 1563.986267][T32389] ? inet6_sendmsg+0x5f/0xd0 [ 1563.990870][T32389] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1563.996169][T32389] ____sys_sendmsg+0x61b/0x980 [ 1564.000948][T32389] ? __sys_sendmsg_sock+0x30/0x30 [ 1564.006074][T32389] ? __import_iovec+0x3fa/0x850 [ 1564.010956][T32389] ? import_iovec+0x73/0xa0 [ 1564.015488][T32389] ___sys_sendmsg+0x2a6/0x360 [ 1564.020186][T32389] ? __sys_sendmsg+0x2b0/0x2b0 [ 1564.024979][T32389] ? ktime_get+0x7f/0x280 [ 1564.029345][T32389] __se_sys_sendmsg+0x1d0/0x2c0 [ 1564.034204][T32389] ? perf_trace_preemptirq_template+0x269/0x330 [ 1564.040465][T32389] ? __x64_sys_sendmsg+0x80/0x80 [ 1564.045431][T32389] ? lockdep_hardirqs_on+0x98/0x150 [ 1564.050649][T32389] do_syscall_64+0x55/0xb0 [ 1564.055074][T32389] ? clear_bhb_loop+0x40/0x90 [ 1564.059760][T32389] ? clear_bhb_loop+0x40/0x90 [ 1564.064449][T32389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1564.070352][T32389] RIP: 0033:0x7f4f2b59de99 [ 1564.074786][T32389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.094417][T32389] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1564.102866][T32389] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1564.110853][T32389] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000005 [ 1564.118840][T32389] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.126834][T32389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.134830][T32389] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1564.142856][T32389] [ 1564.372079][T32397] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1564.469627][T32397] netlink: 'syz.3.8870': attribute type 10 has an invalid length. [ 1564.652037][T32397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.780559][T32397] bond0: (slave team0): Enslaving as an active interface with an up link [ 1565.026799][T32050] tipc: Subscription rejected, illegal request [ 1565.079097][T32411] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8876'. [ 1565.111549][T32407] IPv6: Can't replace route, no match found [ 1565.134131][T32411] FAULT_INJECTION: forcing a failure. [ 1565.134131][T32411] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.150230][T32411] CPU: 0 PID: 32411 Comm: syz.0.8876 Not tainted syzkaller #0 [ 1565.157748][T32411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1565.167849][T32411] Call Trace: [ 1565.171158][T32411] [ 1565.174114][T32411] dump_stack_lvl+0x18c/0x250 [ 1565.178835][T32411] ? show_regs_print_info+0x20/0x20 [ 1565.184075][T32411] ? load_image+0x420/0x420 [ 1565.188650][T32411] ? __might_sleep+0xe0/0xe0 [ 1565.193354][T32411] ? __lock_acquire+0x7d80/0x7d80 [ 1565.198482][T32411] should_fail_ex+0x394/0x4c0 [ 1565.203276][T32411] should_failslab+0x9/0x20 [ 1565.207842][T32411] slab_pre_alloc_hook+0x59/0x300 [ 1565.212929][T32411] ? rtnl_newlink+0x10d/0x2170 [ 1565.217750][T32411] __kmem_cache_alloc_node+0x53/0x250 [ 1565.223189][T32411] ? rtnl_newlink+0x10d/0x2170 [ 1565.228002][T32411] kmalloc_trace+0x2a/0xe0 [ 1565.232477][T32411] rtnl_newlink+0x10d/0x2170 [ 1565.237138][T32411] ? verify_lock_unused+0x140/0x140 [ 1565.242381][T32411] ? __mutex_trylock_common+0x160/0x270 [ 1565.247970][T32411] ? rtnl_setlink+0x4e0/0x4e0 [ 1565.252694][T32411] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1565.258885][T32411] ? rcu_is_watching+0x15/0xb0 [ 1565.263691][T32411] ? trace_contention_end+0x39/0xe0 [ 1565.268921][T32411] ? __mutex_lock+0x30d/0xc80 [ 1565.273652][T32411] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1565.278805][T32411] ? mutex_lock_nested+0x20/0x20 [ 1565.283815][T32411] ? rtnl_setlink+0x4e0/0x4e0 [ 1565.288575][T32411] rtnetlink_rcv_msg+0x843/0xf90 [ 1565.293566][T32411] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1565.298728][T32411] ? rtnetlink_bind+0x80/0x80 [ 1565.303486][T32411] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1565.309675][T32411] ? lockdep_hardirqs_on+0x98/0x150 [ 1565.314900][T32411] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1565.321081][T32411] ? __dev_queue_xmit+0x275/0x3630 [ 1565.326225][T32411] ? __local_bh_enable_ip+0x142/0x1c0 [ 1565.331607][T32411] ? _local_bh_enable+0xa0/0xa0 [ 1565.336471][T32411] ? __dev_queue_xmit+0x275/0x3630 [ 1565.341598][T32411] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1565.346816][T32411] ? __dev_queue_xmit+0x275/0x3630 [ 1565.351950][T32411] ? ref_tracker_free+0x686/0x830 [ 1565.357004][T32411] netlink_rcv_skb+0x235/0x4c0 [ 1565.361802][T32411] ? rtnetlink_bind+0x80/0x80 [ 1565.366491][T32411] ? netlink_ack+0x1160/0x1160 [ 1565.371283][T32411] ? __lock_acquire+0x7d80/0x7d80 [ 1565.376336][T32411] ? netlink_deliver_tap+0x2e/0x1b0 [ 1565.381570][T32411] netlink_unicast+0x7b1/0x930 [ 1565.386388][T32411] netlink_sendmsg+0x8d0/0xbf0 [ 1565.391170][T32411] ? netlink_getsockopt+0x590/0x590 [ 1565.396378][T32411] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1565.401938][T32411] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1565.407242][T32411] ? security_socket_sendmsg+0x80/0xa0 [ 1565.412737][T32411] ? netlink_getsockopt+0x590/0x590 [ 1565.417950][T32411] ____sys_sendmsg+0x61b/0x980 [ 1565.422749][T32411] ? __asan_memset+0x22/0x40 [ 1565.427370][T32411] ? __sys_sendmsg_sock+0x30/0x30 [ 1565.432417][T32411] ? __import_iovec+0x5f2/0x850 [ 1565.437296][T32411] ? import_iovec+0x73/0xa0 [ 1565.441837][T32411] ___sys_sendmsg+0x2a6/0x360 [ 1565.446530][T32411] ? __sys_sendmsg+0x2b0/0x2b0 [ 1565.451316][T32411] ? ktime_get+0x7f/0x280 [ 1565.455674][T32411] __se_sys_sendmsg+0x1d0/0x2c0 [ 1565.460541][T32411] ? perf_trace_preemptirq_template+0x269/0x330 [ 1565.466797][T32411] ? __x64_sys_sendmsg+0x80/0x80 [ 1565.471758][T32411] ? lockdep_hardirqs_on+0x98/0x150 [ 1565.476974][T32411] do_syscall_64+0x55/0xb0 [ 1565.481421][T32411] ? clear_bhb_loop+0x40/0x90 [ 1565.486119][T32411] ? clear_bhb_loop+0x40/0x90 [ 1565.490828][T32411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1565.496735][T32411] RIP: 0033:0x7fa11df9de99 [ 1565.501160][T32411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.520796][T32411] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1565.529240][T32411] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1565.537237][T32411] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 1565.545229][T32411] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.553224][T32411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.561231][T32411] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1565.569228][T32411] [ 1566.701540][T32050] tipc: Subscription rejected, illegal request [ 1567.309176][T32456] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8893'. [ 1567.416701][T32459] FAULT_INJECTION: forcing a failure. [ 1567.416701][T32459] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.435029][T32459] CPU: 0 PID: 32459 Comm: syz.0.8894 Not tainted syzkaller #0 [ 1567.442535][T32459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1567.452614][T32459] Call Trace: [ 1567.455923][T32459] [ 1567.458890][T32459] dump_stack_lvl+0x18c/0x250 [ 1567.463606][T32459] ? show_regs_print_info+0x20/0x20 [ 1567.468834][T32459] ? load_image+0x420/0x420 [ 1567.473383][T32459] ? __might_sleep+0xe0/0xe0 [ 1567.478022][T32459] ? __lock_acquire+0x7d80/0x7d80 [ 1567.483096][T32459] ? __asan_memset+0x22/0x40 [ 1567.487735][T32459] should_fail_ex+0x394/0x4c0 [ 1567.492483][T32459] should_failslab+0x9/0x20 [ 1567.497026][T32459] slab_pre_alloc_hook+0x59/0x300 [ 1567.502149][T32459] ? __kthread_create_on_node+0x116/0x3d0 [ 1567.507907][T32459] __kmem_cache_alloc_node+0x53/0x250 [ 1567.513333][T32459] ? __kthread_create_on_node+0x116/0x3d0 [ 1567.519082][T32459] kmalloc_trace+0x2a/0xe0 [ 1567.523547][T32459] ? rxrpc_direct_abort+0x330/0x330 [ 1567.528782][T32459] __kthread_create_on_node+0x116/0x3d0 [ 1567.534360][T32459] ? kthread_create_on_node+0x140/0x140 [ 1567.539950][T32459] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1567.545989][T32459] ? rxrpc_direct_abort+0x330/0x330 [ 1567.551247][T32459] ? rxrpc_direct_abort+0x330/0x330 [ 1567.556491][T32459] kthread_create_on_node+0xec/0x140 [ 1567.561811][T32459] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1567.567224][T32459] ? tsk_fork_get_node+0x70/0x70 [ 1567.572203][T32459] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1567.577634][T32459] rxrpc_lookup_local+0x1041/0x1700 [ 1567.582911][T32459] ? rxrpc_local_dont_fragment+0x70/0x70 [ 1567.588587][T32459] ? none_clear+0x10/0x10 [ 1567.592962][T32459] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 1567.599097][T32459] ? do_raw_spin_unlock+0x121/0x230 [ 1567.604341][T32459] rxrpc_sendmsg+0x2f3/0x5b0 [ 1567.608976][T32459] ? rxrpc_getsockopt+0x150/0x150 [ 1567.614038][T32459] ____sys_sendmsg+0x61b/0x980 [ 1567.618868][T32459] ? __sys_sendmsg_sock+0x30/0x30 [ 1567.623921][T32459] ? __import_iovec+0x3fa/0x850 [ 1567.628813][T32459] ? import_iovec+0x73/0xa0 [ 1567.633349][T32459] ___sys_sendmsg+0x2a6/0x360 [ 1567.638078][T32459] ? __sys_sendmsg+0x2b0/0x2b0 [ 1567.642931][T32459] __se_sys_sendmsg+0x1d0/0x2c0 [ 1567.647831][T32459] ? __x64_sys_sendmsg+0x80/0x80 [ 1567.652831][T32459] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1567.658784][T32459] do_syscall_64+0x55/0xb0 [ 1567.663245][T32459] ? clear_bhb_loop+0x40/0x90 [ 1567.667962][T32459] ? clear_bhb_loop+0x40/0x90 [ 1567.672680][T32459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1567.678628][T32459] RIP: 0033:0x7fa11df9de99 [ 1567.683092][T32459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.702729][T32459] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1567.711176][T32459] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1567.719183][T32459] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000006 [ 1567.727193][T32459] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.735195][T32459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.743195][T32459] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1567.751210][T32459] [ 1567.765842][T13776] tipc: Subscription rejected, illegal request [ 1568.022710][T32476] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8900'. [ 1568.058494][T32476] netlink: 'syz.1.8900': attribute type 9 has an invalid length. [ 1568.070421][T32476] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8900'. [ 1568.185615][T32478] netlink: 'syz.1.8900': attribute type 9 has an invalid length. [ 1568.197641][T32478] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8900'. [ 1568.343076][T32488] netlink: 'syz.0.8903': attribute type 21 has an invalid length. [ 1568.415181][ T3432] tipc: Subscription rejected, illegal request [ 1568.497673][T32494] FAULT_INJECTION: forcing a failure. [ 1568.497673][T32494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.517386][T32494] CPU: 0 PID: 32494 Comm: syz.3.8906 Not tainted syzkaller #0 [ 1568.524905][T32494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.534994][T32494] Call Trace: [ 1568.538313][T32494] [ 1568.541264][T32494] dump_stack_lvl+0x18c/0x250 [ 1568.545975][T32494] ? show_regs_print_info+0x20/0x20 [ 1568.551206][T32494] ? load_image+0x420/0x420 [ 1568.555782][T32494] ? __might_fault+0xaa/0x120 [ 1568.560491][T32494] ? __lock_acquire+0x7d80/0x7d80 [ 1568.565559][T32494] should_fail_ex+0x394/0x4c0 [ 1568.570299][T32494] _copy_from_iter+0x1cd/0x1290 [ 1568.575185][T32494] ? __might_fault+0xaa/0x120 [ 1568.579905][T32494] ? copyout_mc+0x70/0x70 [ 1568.584278][T32494] ? copyout_mc+0x70/0x70 [ 1568.588613][T32494] ? __virt_addr_valid+0x10c/0x380 [ 1568.593748][T32494] ? page_copy_sane+0x16a/0x270 [ 1568.598606][T32494] copy_page_from_iter+0x7b/0x100 [ 1568.603634][T32494] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1568.609469][T32494] unix_stream_sendmsg+0x562/0xbf0 [ 1568.614627][T32494] ? unix_show_fdinfo+0x280/0x280 [ 1568.619686][T32494] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1568.626144][T32494] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1568.631721][T32494] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1568.637046][T32494] ? security_socket_sendmsg+0x80/0xa0 [ 1568.642527][T32494] sock_write_iter+0x2dc/0x420 [ 1568.647302][T32494] ? sock_read_iter+0x3f0/0x3f0 [ 1568.652167][T32494] ? common_file_perm+0x198/0x1f0 [ 1568.657215][T32494] vfs_write+0x474/0x9a0 [ 1568.661486][T32494] ? file_end_write+0x250/0x250 [ 1568.666341][T32494] ? __fget_files+0x3fc/0x460 [ 1568.671030][T32494] ? __fdget_pos+0x1d8/0x330 [ 1568.675620][T32494] ? ksys_write+0x74/0x260 [ 1568.680039][T32494] ksys_write+0x151/0x260 [ 1568.684385][T32494] ? __ia32_sys_read+0x90/0x90 [ 1568.689250][T32494] ? lockdep_hardirqs_on+0x98/0x150 [ 1568.694490][T32494] do_syscall_64+0x55/0xb0 [ 1568.698923][T32494] ? clear_bhb_loop+0x40/0x90 [ 1568.703622][T32494] ? clear_bhb_loop+0x40/0x90 [ 1568.708300][T32494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1568.714210][T32494] RIP: 0033:0x7f4f2b59de99 [ 1568.718643][T32494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.738251][T32494] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1568.746685][T32494] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1568.754677][T32494] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 1568.762669][T32494] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.770681][T32494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.778652][T32494] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1568.786639][T32494] [ 1569.661660][T32523] FAULT_INJECTION: forcing a failure. [ 1569.661660][T32523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.729115][T32523] CPU: 1 PID: 32523 Comm: syz.0.8913 Not tainted syzkaller #0 [ 1569.736636][T32523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1569.746719][T32523] Call Trace: [ 1569.750033][T32523] [ 1569.753009][T32523] dump_stack_lvl+0x18c/0x250 [ 1569.757734][T32523] ? show_regs_print_info+0x20/0x20 [ 1569.762967][T32523] ? load_image+0x420/0x420 [ 1569.767503][T32523] ? __might_fault+0xaa/0x120 [ 1569.772202][T32523] ? __lock_acquire+0x7d80/0x7d80 [ 1569.777261][T32523] should_fail_ex+0x394/0x4c0 [ 1569.781969][T32523] _copy_from_user+0x2f/0xe0 [ 1569.786570][T32523] ___sys_recvmsg+0x174/0x590 [ 1569.791379][T32523] ? __sys_recvmsg+0x2a0/0x2a0 [ 1569.796167][T32523] ? ksys_write+0x1d2/0x260 [ 1569.800711][T32523] ? __fget_files+0x3fc/0x460 [ 1569.805462][T32523] __x64_sys_recvmsg+0x21e/0x2f0 [ 1569.810441][T32523] ? ___sys_recvmsg+0x590/0x590 [ 1569.815313][T32523] ? lockdep_hardirqs_on+0x98/0x150 [ 1569.820529][T32523] do_syscall_64+0x55/0xb0 [ 1569.824951][T32523] ? clear_bhb_loop+0x40/0x90 [ 1569.829636][T32523] ? clear_bhb_loop+0x40/0x90 [ 1569.834326][T32523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1569.840235][T32523] RIP: 0033:0x7fa11df9de99 [ 1569.844670][T32523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.864290][T32523] RSP: 002b:00007fa11edb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1569.872716][T32523] RAX: ffffffffffffffda RBX: 00007fa11e226180 RCX: 00007fa11df9de99 [ 1569.880695][T32523] RDX: 0000000000012143 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1569.888675][T32523] RBP: 00007fa11edb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.896656][T32523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.904636][T32523] R13: 00007fa11e226218 R14: 00007fa11e226180 R15: 00007ffde00a2278 [ 1569.912733][T32523] [ 1570.260858][T13782] tipc: Subscription rejected, illegal request [ 1570.512355][T32530] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1570.574984][T32535] FAULT_INJECTION: forcing a failure. [ 1570.574984][T32535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1570.591353][T32535] CPU: 1 PID: 32535 Comm: syz.1.8919 Not tainted syzkaller #0 [ 1570.598870][T32535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1570.608965][T32535] Call Trace: [ 1570.612308][T32535] [ 1570.615289][T32535] dump_stack_lvl+0x18c/0x250 [ 1570.620021][T32535] ? show_regs_print_info+0x20/0x20 [ 1570.625270][T32535] ? load_image+0x420/0x420 [ 1570.629863][T32535] ? __lock_acquire+0x7d80/0x7d80 [ 1570.634936][T32535] ? snprintf+0xe9/0x140 [ 1570.639234][T32535] should_fail_ex+0x394/0x4c0 [ 1570.643976][T32535] _copy_to_user+0x2f/0xa0 [ 1570.648427][T32535] simple_read_from_buffer+0xe7/0x150 [ 1570.653870][T32535] proc_fail_nth_read+0x1e8/0x260 [ 1570.658937][T32535] ? proc_fault_inject_write+0x360/0x360 [ 1570.664630][T32535] ? fsnotify_perm+0x271/0x5e0 [ 1570.669418][T32535] ? proc_fault_inject_write+0x360/0x360 [ 1570.675077][T32535] vfs_read+0x298/0x990 [ 1570.679270][T32535] ? kernel_read+0x1e0/0x1e0 [ 1570.683899][T32535] ? __fget_files+0x28/0x460 [ 1570.688543][T32535] ? __fget_files+0x3fc/0x460 [ 1570.693267][T32535] ? __fdget_pos+0x2a3/0x330 [ 1570.697886][T32535] ? ksys_read+0x74/0x260 [ 1570.702272][T32535] ksys_read+0x151/0x260 [ 1570.706554][T32535] ? vfs_write+0x9a0/0x9a0 [ 1570.711001][T32535] ? lockdep_hardirqs_on+0x98/0x150 [ 1570.716231][T32535] do_syscall_64+0x55/0xb0 [ 1570.720670][T32535] ? clear_bhb_loop+0x40/0x90 [ 1570.725397][T32535] ? clear_bhb_loop+0x40/0x90 [ 1570.730100][T32535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1570.736007][T32535] RIP: 0033:0x7f80fcd5e6ce [ 1570.740441][T32535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1570.760065][T32535] RSP: 002b:00007f80fdc22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1570.768502][T32535] RAX: ffffffffffffffda RBX: 00007f80fdc236c0 RCX: 00007f80fcd5e6ce [ 1570.776495][T32535] RDX: 000000000000000f RSI: 00007f80fdc230a0 RDI: 0000000000000005 [ 1570.784494][T32535] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.792492][T32535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.800481][T32535] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1570.808526][T32535] [ 1570.870354][T32530] netlink: 'syz.0.8917': attribute type 10 has an invalid length. [ 1571.085659][T32530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.750699][ T3432] tipc: Subscription rejected, illegal request [ 1572.385709][T32574] FAULT_INJECTION: forcing a failure. [ 1572.385709][T32574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.425454][T32574] CPU: 0 PID: 32574 Comm: syz.0.8933 Not tainted syzkaller #0 [ 1572.432985][T32574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1572.443063][T32574] Call Trace: [ 1572.446364][T32574] [ 1572.449318][T32574] dump_stack_lvl+0x18c/0x250 [ 1572.454028][T32574] ? show_regs_print_info+0x20/0x20 [ 1572.459266][T32574] ? load_image+0x420/0x420 [ 1572.463816][T32574] ? __might_fault+0xaa/0x120 [ 1572.468519][T32574] ? __lock_acquire+0x7d80/0x7d80 [ 1572.473576][T32574] should_fail_ex+0x394/0x4c0 [ 1572.478322][T32574] _copy_from_user+0x2f/0xe0 [ 1572.482978][T32574] do_tcp_setsockopt+0x58d/0x1c50 [ 1572.488080][T32574] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 1572.493499][T32574] ? aa_af_perm+0x330/0x330 [ 1572.498056][T32574] ? __fget_files+0x28/0x460 [ 1572.502692][T32574] ? aa_sock_opt_perm+0x74/0x100 [ 1572.507683][T32574] ? sock_common_setsockopt+0x36/0xc0 [ 1572.513124][T32574] ? tcp_setsockopt+0x3d/0xe0 [ 1572.517858][T32574] ? tcp_enable_tx_delay+0x70/0x70 [ 1572.523014][T32574] ? sock_common_recvmsg+0x190/0x190 [ 1572.528356][T32574] do_sock_setsockopt+0x175/0x1a0 [ 1572.533414][T32574] ? __fdget+0x180/0x210 [ 1572.537701][T32574] __x64_sys_setsockopt+0x182/0x200 [ 1572.542946][T32574] do_syscall_64+0x55/0xb0 [ 1572.547399][T32574] ? clear_bhb_loop+0x40/0x90 [ 1572.552141][T32574] ? clear_bhb_loop+0x40/0x90 [ 1572.556872][T32574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1572.562823][T32574] RIP: 0033:0x7fa11df9de99 [ 1572.567271][T32574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.586918][T32574] RSP: 002b:00007fa11edf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1572.595371][T32574] RAX: ffffffffffffffda RBX: 00007fa11e225fa0 RCX: 00007fa11df9de99 [ 1572.603405][T32574] RDX: 0000000000000011 RSI: 0000000000000006 RDI: 0000000000000004 [ 1572.611410][T32574] RBP: 00007fa11edf2090 R08: 0000000000000004 R09: 0000000000000000 [ 1572.619417][T32574] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1572.627424][T32574] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1572.635445][T32574] [ 1572.824014][T32581] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8936'. [ 1572.931359][T32581] netlink: 'syz.2.8936': attribute type 10 has an invalid length. [ 1572.966176][T32581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.026616][T32581] bond0: (slave team0): Enslaving as an active interface with an up link [ 1573.600549][T32602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1573.610134][T32602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1573.621034][T32602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1573.630894][T32602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1573.770091][ T3432] tipc: Subscription rejected, illegal request [ 1574.578803][T32612] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8945'. [ 1574.747402][T32614] syzkaller0: entered promiscuous mode [ 1574.755089][T32614] syzkaller0: entered allmulticast mode [ 1575.701803][T32633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1577.377404][T32631] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1577.388464][T32633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1577.398494][T32638] netlink: 'syz.1.8950': attribute type 10 has an invalid length. [ 1577.421061][T32638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.442000][T32638] .`: (slave team0): Enslaving as an active interface with an up link [ 1577.943992][T32656] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1578.747375][T32676] netlink: 'syz.0.8966': attribute type 3 has an invalid length. [ 1578.765419][T32676] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1578.965818][T32684] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8968'. [ 1579.159689][T32688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8969'. [ 1581.904604][T32753] netlink: 'syz.3.8990': attribute type 10 has an invalid length. [ 1581.928604][T32753] macvlan0: entered promiscuous mode [ 1581.953780][T32753] macvlan0: entered allmulticast mode [ 1581.996423][T32753] veth1_vlan: entered allmulticast mode [ 1582.027879][T32753] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1582.044148][T32760] FAULT_INJECTION: forcing a failure. [ 1582.044148][T32760] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.075761][T32760] CPU: 0 PID: 32760 Comm: syz.2.8991 Not tainted syzkaller #0 [ 1582.083279][T32760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1582.093346][T32760] Call Trace: [ 1582.096645][T32760] [ 1582.099592][T32760] dump_stack_lvl+0x18c/0x250 [ 1582.104288][T32760] ? show_regs_print_info+0x20/0x20 [ 1582.109511][T32760] ? load_image+0x420/0x420 [ 1582.114029][T32760] ? __might_sleep+0xe0/0xe0 [ 1582.118633][T32760] ? __lock_acquire+0x7d80/0x7d80 [ 1582.123672][T32760] should_fail_ex+0x394/0x4c0 [ 1582.128367][T32760] should_failslab+0x9/0x20 [ 1582.132891][T32760] slab_pre_alloc_hook+0x59/0x300 [ 1582.137958][T32760] kmem_cache_alloc_node+0x5e/0x310 [ 1582.143185][T32760] ? __alloc_skb+0x103/0x2c0 [ 1582.147795][T32760] __alloc_skb+0x103/0x2c0 [ 1582.152236][T32760] rtmsg_ifa+0xf9/0x1f0 [ 1582.156420][T32760] __inet_del_ifa+0xa98/0x1090 [ 1582.161221][T32760] devinet_ioctl+0x14ef/0x1d70 [ 1582.166009][T32760] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1582.171139][T32760] ? _copy_from_user+0xa5/0xe0 [ 1582.175922][T32760] ? get_user_ifreq+0x12b/0x180 [ 1582.180795][T32760] inet_ioctl+0x42b/0x560 [ 1582.185152][T32760] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1582.190832][T32760] ? inet_shutdown+0x370/0x370 [ 1582.195611][T32760] ? slab_free_freelist_hook+0x130/0x1a0 [ 1582.201258][T32760] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 1582.206908][T32760] ? __kmem_cache_free+0xba/0x1f0 [ 1582.211960][T32760] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1582.217445][T32760] ? packet_ioctl+0x264/0x350 [ 1582.222145][T32760] sock_do_ioctl+0xfc/0x310 [ 1582.226662][T32760] ? sock_show_fdinfo+0xb0/0xb0 [ 1582.231535][T32760] sock_ioctl+0x5be/0x7e0 [ 1582.235960][T32760] ? sock_poll+0x3e0/0x3e0 [ 1582.240396][T32760] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1582.245345][T32760] ? security_file_ioctl+0x80/0xa0 [ 1582.250496][T32760] ? sock_poll+0x3e0/0x3e0 [ 1582.254924][T32760] __se_sys_ioctl+0xfd/0x170 [ 1582.259532][T32760] do_syscall_64+0x55/0xb0 [ 1582.263960][T32760] ? clear_bhb_loop+0x40/0x90 [ 1582.268669][T32760] ? clear_bhb_loop+0x40/0x90 [ 1582.273357][T32760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1582.279270][T32760] RIP: 0033:0x7f149df9de99 [ 1582.283700][T32760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.303337][T32760] RSP: 002b:00007f149ee58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.311772][T32760] RAX: ffffffffffffffda RBX: 00007f149e226090 RCX: 00007f149df9de99 [ 1582.319764][T32760] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 000000000000000a [ 1582.327752][T32760] RBP: 00007f149ee58090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.335747][T32760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.343734][T32760] R13: 00007f149e226128 R14: 00007f149e226090 R15: 00007ffd1e817a28 [ 1582.351732][T32760] [ 1582.994173][ T307] netlink: 'syz.0.8996': attribute type 1 has an invalid length. [ 1583.015143][ T307] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8996'. [ 1583.463182][ T316] netlink: 'syz.3.8999': attribute type 21 has an invalid length. [ 1583.482653][ T316] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1583.498846][ T316] netlink: 'syz.3.8999': attribute type 5 has an invalid length. [ 1583.522870][ T316] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1583.575815][ T317] netlink: 'syz.3.8999': attribute type 3 has an invalid length. [ 1583.607293][ T317] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1584.225505][ T332] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9005'. [ 1584.498691][ T342] netlink: 'syz.1.9007': attribute type 1 has an invalid length. [ 1584.557114][ T342] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9007'. [ 1585.578410][T14719] Bluetooth: hci4: ISO packet for unknown connection handle 60 [ 1586.346218][ T372] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9017'. [ 1587.541290][ T396] netlink: 'syz.1.9025': attribute type 10 has an invalid length. [ 1587.563588][ T396] macvlan0: entered promiscuous mode [ 1587.568932][ T396] macvlan0: entered allmulticast mode [ 1587.604192][ T396] veth1_vlan: entered allmulticast mode [ 1587.645854][ T396] .`: (slave macvlan0): Enslaving as an active interface with an up link [ 1587.718229][ T403] dummy0: left allmulticast mode [ 1587.725320][ T403] bridge0: port 1(dummy0) entered disabled state [ 1587.738412][ T403] bridge_slave_1: left allmulticast mode [ 1587.745892][ T403] bridge_slave_1: left promiscuous mode [ 1587.758751][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.173293][ T416] netlink: 'syz.3.9030': attribute type 1 has an invalid length. [ 1588.196424][ T416] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9030'. [ 1589.496125][ T449] netlink: 'syz.3.9041': attribute type 10 has an invalid length. [ 1589.689733][ T449] team0: Port device .3ãc¤± added [ 1589.715344][ T448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1590.183992][ T466] netlink: 'syz.1.9047': attribute type 6 has an invalid length. [ 1590.192744][ T466] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1591.548305][ T498] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9058'. [ 1593.204477][ T540] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9071'. [ 1593.506959][ T540] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1593.691601][ T552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9073'. [ 1593.706538][ T552] FAULT_INJECTION: forcing a failure. [ 1593.706538][ T552] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.721198][ T552] CPU: 1 PID: 552 Comm: syz.0.9073 Not tainted syzkaller #0 [ 1593.728520][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1593.738597][ T552] Call Trace: [ 1593.741917][ T552] [ 1593.744886][ T552] dump_stack_lvl+0x18c/0x250 [ 1593.749605][ T552] ? show_regs_print_info+0x20/0x20 [ 1593.754836][ T552] ? load_image+0x420/0x420 [ 1593.759380][ T552] ? __might_sleep+0xe0/0xe0 [ 1593.764007][ T552] ? __lock_acquire+0x7d80/0x7d80 [ 1593.769064][ T552] should_fail_ex+0x394/0x4c0 [ 1593.773790][ T552] should_failslab+0x9/0x20 [ 1593.778348][ T552] slab_pre_alloc_hook+0x59/0x300 [ 1593.783423][ T552] kmem_cache_alloc_node+0x5e/0x310 [ 1593.788660][ T552] ? __alloc_skb+0x103/0x2c0 [ 1593.793288][ T552] __alloc_skb+0x103/0x2c0 [ 1593.797752][ T552] netlink_ack+0x377/0x1160 [ 1593.802333][ T552] ? lockdep_hardirqs_on+0x98/0x150 [ 1593.807583][ T552] ? netlink_dump+0xec0/0xec0 [ 1593.812323][ T552] ? netlink_rcv_skb+0x1/0x4c0 [ 1593.817147][ T552] ? netlink_rcv_skb+0x10a/0x4c0 [ 1593.822135][ T552] ? kasan_check_range+0x1bc/0x290 [ 1593.827307][ T552] netlink_rcv_skb+0x2b3/0x4c0 [ 1593.832126][ T552] ? rtnetlink_bind+0x80/0x80 [ 1593.836833][ T552] ? netlink_ack+0x1160/0x1160 [ 1593.841655][ T552] ? __lock_acquire+0x7d80/0x7d80 [ 1593.846730][ T552] ? netlink_deliver_tap+0x2e/0x1b0 [ 1593.851973][ T552] netlink_unicast+0x7b1/0x930 [ 1593.856783][ T552] netlink_sendmsg+0x8d0/0xbf0 [ 1593.861588][ T552] ? netlink_getsockopt+0x590/0x590 [ 1593.866819][ T552] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1593.872403][ T552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1593.877730][ T552] ? security_socket_sendmsg+0x80/0xa0 [ 1593.883204][ T552] ? netlink_getsockopt+0x590/0x590 [ 1593.888401][ T552] ____sys_sendmsg+0x61b/0x980 [ 1593.893169][ T552] ? __asan_memset+0x22/0x40 [ 1593.897765][ T552] ? __sys_sendmsg_sock+0x30/0x30 [ 1593.902802][ T552] ? __import_iovec+0x5f2/0x850 [ 1593.907687][ T552] ? import_iovec+0x73/0xa0 [ 1593.912204][ T552] ___sys_sendmsg+0x2a6/0x360 [ 1593.916882][ T552] ? __sys_sendmsg+0x2b0/0x2b0 [ 1593.921652][ T552] ? trace_call_bpf+0xc3/0x6c0 [ 1593.926444][ T552] __se_sys_sendmsg+0x1d0/0x2c0 [ 1593.931330][ T552] ? perf_trace_preemptirq_template+0x269/0x330 [ 1593.937610][ T552] ? __x64_sys_sendmsg+0x80/0x80 [ 1593.942604][ T552] ? lockdep_hardirqs_on+0x98/0x150 [ 1593.947851][ T552] do_syscall_64+0x55/0xb0 [ 1593.952312][ T552] ? clear_bhb_loop+0x40/0x90 [ 1593.957029][ T552] ? clear_bhb_loop+0x40/0x90 [ 1593.961770][ T552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1593.967699][ T552] RIP: 0033:0x7fa11df9de99 [ 1593.972152][ T552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.987808][ T551] netlink: 'syz.1.9074': attribute type 7 has an invalid length. [ 1593.991765][ T552] RSP: 002b:00007fa11edd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.991790][ T552] RAX: ffffffffffffffda RBX: 00007fa11e226090 RCX: 00007fa11df9de99 [ 1593.991805][ T552] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1594.024026][ T552] RBP: 00007fa11edd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.032013][ T552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.039994][ T552] R13: 00007fa11e226128 R14: 00007fa11e226090 R15: 00007ffde00a2278 [ 1594.048013][ T552] [ 1594.062068][ T556] FAULT_INJECTION: forcing a failure. [ 1594.062068][ T556] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.075825][ T556] CPU: 1 PID: 556 Comm: syz.3.9076 Not tainted syzkaller #0 [ 1594.083141][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1594.093218][ T556] Call Trace: [ 1594.096509][ T556] [ 1594.099460][ T556] dump_stack_lvl+0x18c/0x250 [ 1594.104155][ T556] ? show_regs_print_info+0x20/0x20 [ 1594.109374][ T556] ? load_image+0x420/0x420 [ 1594.113899][ T556] ? verify_lock_unused+0x140/0x140 [ 1594.119129][ T556] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1594.124869][ T556] should_fail_ex+0x394/0x4c0 [ 1594.129560][ T556] should_failslab+0x9/0x20 [ 1594.134080][ T556] slab_pre_alloc_hook+0x59/0x300 [ 1594.139123][ T556] kmem_cache_alloc+0x5a/0x2c0 [ 1594.143898][ T556] ? skb_clone+0x1eb/0x370 [ 1594.148335][ T556] skb_clone+0x1eb/0x370 [ 1594.152590][ T556] __netlink_deliver_tap+0x411/0x7f0 [ 1594.157897][ T556] ? netlink_deliver_tap+0x2e/0x1b0 [ 1594.163113][ T556] netlink_deliver_tap+0x19c/0x1b0 [ 1594.168285][ T556] netlink_unicast+0x77b/0x930 [ 1594.173071][ T556] netlink_sendmsg+0x8d0/0xbf0 [ 1594.177854][ T556] ? netlink_getsockopt+0x590/0x590 [ 1594.183076][ T556] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1594.188637][ T556] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1594.194019][ T556] ? security_socket_sendmsg+0x80/0xa0 [ 1594.199488][ T556] ? netlink_getsockopt+0x590/0x590 [ 1594.204710][ T556] ____sys_sendmsg+0x61b/0x980 [ 1594.209499][ T556] ? __sys_sendmsg_sock+0x30/0x30 [ 1594.214539][ T556] ? __import_iovec+0x5f2/0x850 [ 1594.219413][ T556] ? import_iovec+0x73/0xa0 [ 1594.223938][ T556] ___sys_sendmsg+0x2a6/0x360 [ 1594.228627][ T556] ? get_pid_task+0x20/0x1e0 [ 1594.233245][ T556] ? __sys_sendmsg+0x2b0/0x2b0 [ 1594.238051][ T556] ? __lock_acquire+0x7d80/0x7d80 [ 1594.243119][ T556] __se_sys_sendmsg+0x1d0/0x2c0 [ 1594.247994][ T556] ? perf_trace_preemptirq_template+0x269/0x330 [ 1594.254273][ T556] ? __x64_sys_sendmsg+0x80/0x80 [ 1594.259235][ T556] ? lockdep_hardirqs_on+0x98/0x150 [ 1594.264463][ T556] do_syscall_64+0x55/0xb0 [ 1594.268897][ T556] ? clear_bhb_loop+0x40/0x90 [ 1594.273597][ T556] ? clear_bhb_loop+0x40/0x90 [ 1594.278303][ T556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.284219][ T556] RIP: 0033:0x7f4f2b59de99 [ 1594.288664][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.308304][ T556] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.316755][ T556] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1594.324757][ T556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1594.332756][ T556] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.340749][ T556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.348738][ T556] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1594.356743][ T556] [ 1594.801797][ T573] netlink: 'syz.0.9082': attribute type 10 has an invalid length. [ 1594.969289][ T573] team0: Port device .3ãc¤± added [ 1594.991675][ T578] IPv6: Can't replace route, no match found [ 1595.000882][ T572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.282182][ T587] FAULT_INJECTION: forcing a failure. [ 1595.282182][ T587] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.336640][ T587] CPU: 1 PID: 587 Comm: syz.3.9087 Not tainted syzkaller #0 [ 1595.343994][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1595.354109][ T587] Call Trace: [ 1595.357428][ T587] [ 1595.360389][ T587] dump_stack_lvl+0x18c/0x250 [ 1595.365129][ T587] ? show_regs_print_info+0x20/0x20 [ 1595.370370][ T587] ? load_image+0x420/0x420 [ 1595.374928][ T587] ? __lock_acquire+0x7d80/0x7d80 [ 1595.379983][ T587] should_fail_ex+0x394/0x4c0 [ 1595.384698][ T587] should_failslab+0x9/0x20 [ 1595.389241][ T587] slab_pre_alloc_hook+0x59/0x300 [ 1595.394305][ T587] ? bpf_test_init+0x9f/0x140 [ 1595.399020][ T587] ? bpf_test_init+0x9f/0x140 [ 1595.403727][ T587] __kmem_cache_alloc_node+0x53/0x250 [ 1595.409146][ T587] ? bpf_test_init+0x9f/0x140 [ 1595.413871][ T587] __kmalloc+0xa7/0x240 [ 1595.418077][ T587] bpf_test_init+0x9f/0x140 [ 1595.422625][ T587] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 1595.428029][ T587] ? __lock_acquire+0x7d80/0x7d80 [ 1595.433097][ T587] ? lockdep_hardirqs_on+0x98/0x150 [ 1595.438335][ T587] ? dev_put+0x80/0x80 [ 1595.442444][ T587] ? dev_put+0x80/0x80 [ 1595.446545][ T587] bpf_prog_test_run+0x31f/0x390 [ 1595.451508][ T587] __sys_bpf+0x49d/0x890 [ 1595.455782][ T587] ? read_tsc+0x9/0x20 [ 1595.459902][ T587] ? bpf_link_show_fdinfo+0x390/0x390 [ 1595.465336][ T587] ? lock_chain_count+0x20/0x20 [ 1595.470246][ T587] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1595.476270][ T587] __x64_sys_bpf+0x7c/0x90 [ 1595.480722][ T587] do_syscall_64+0x55/0xb0 [ 1595.485172][ T587] ? clear_bhb_loop+0x40/0x90 [ 1595.489882][ T587] ? clear_bhb_loop+0x40/0x90 [ 1595.494590][ T587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.500507][ T587] RIP: 0033:0x7f4f2b59de99 [ 1595.504959][ T587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.524602][ T587] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1595.533052][ T587] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1595.541056][ T587] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1595.549077][ T587] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.557131][ T587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.565158][ T587] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1595.573189][ T587] [ 1595.826785][ T597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1596.094213][ T596] macvtap0: refused to change device tx_queue_len [ 1596.322871][ T611] hsr0: left allmulticast mode [ 1596.327710][ T611] hsr_slave_0: left allmulticast mode [ 1596.340916][ T611] hsr_slave_1: left allmulticast mode [ 1596.350352][ T611] bridge0: port 3(hsr0) entered disabled state [ 1596.558284][ T611] bridge_slave_0: left allmulticast mode [ 1596.582507][ T611] bridge_slave_0: left promiscuous mode [ 1596.597223][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.686861][ T618] netlink: 'syz.1.9095': attribute type 10 has an invalid length. [ 1596.725928][ T617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.038564][ T629] netlink: 'syz.3.9098': attribute type 10 has an invalid length. [ 1597.057040][ T627] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1597.075659][ T629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9098'. [ 1597.148791][ T627] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1597.179785][ T627] CPU: 0 PID: 627 Comm: syz.1.9099 Not tainted syzkaller #0 [ 1597.187222][ T627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1597.197321][ T627] Call Trace: [ 1597.200639][ T627] [ 1597.203612][ T627] dump_stack_lvl+0x18c/0x250 [ 1597.208359][ T627] ? show_regs_print_info+0x20/0x20 [ 1597.213601][ T627] ? load_image+0x420/0x420 [ 1597.218192][ T627] sysfs_warn_dup+0x8e/0xa0 [ 1597.222758][ T627] sysfs_do_create_link_sd+0xc0/0x110 [ 1597.228179][ T627] device_add_class_symlinks+0x1cf/0x240 [ 1597.233892][ T627] device_add+0x4f9/0xc40 [ 1597.238313][ T627] wiphy_register+0x1d99/0x2ac0 [ 1597.243243][ T627] ? cfg80211_event_work+0x40/0x40 [ 1597.248481][ T627] ? minstrel_ht_alloc+0x88a/0x990 [ 1597.253658][ T627] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1597.259786][ T627] ieee80211_register_hw+0x2dd8/0x3b30 [ 1597.265302][ T627] ? ieee80211_register_hw+0xf51/0x3b30 [ 1597.270900][ T627] ? ieee80211_tasklet_handler+0x20/0x20 [ 1597.276575][ T627] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1597.282518][ T627] ? __debug_object_init+0xec/0x450 [ 1597.287772][ T627] ? __asan_memset+0x22/0x40 [ 1597.292425][ T627] ? __hrtimer_init+0x189/0x270 [ 1597.297335][ T627] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1597.303123][ T627] ? mac80211_hwsim_free+0x220/0x220 [ 1597.308446][ T627] ? rcu_is_watching+0x15/0xb0 [ 1597.313270][ T627] ? kstrndup+0xbd/0x140 [ 1597.317577][ T627] hwsim_new_radio_nl+0xdad/0x1a70 [ 1597.322746][ T627] ? __nla_validate+0x50/0x50 [ 1597.327485][ T627] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1597.333870][ T627] ? __nla_parse+0x40/0x50 [ 1597.338349][ T627] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1597.344726][ T627] genl_family_rcv_msg_doit+0x21a/0x310 [ 1597.350309][ T627] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1597.356249][ T627] ? bpf_lsm_capable+0x9/0x10 [ 1597.360966][ T627] ? security_capable+0x89/0xb0 [ 1597.365864][ T627] genl_rcv_msg+0x611/0x7a0 [ 1597.370407][ T627] ? genl_bind+0x360/0x360 [ 1597.374865][ T627] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1597.381240][ T627] ? lockdep_hardirqs_on+0x98/0x150 [ 1597.386484][ T627] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1597.392701][ T627] netlink_rcv_skb+0x235/0x4c0 [ 1597.397528][ T627] ? genl_bind+0x360/0x360 [ 1597.402016][ T627] ? netlink_ack+0x1160/0x1160 [ 1597.406848][ T627] ? __lock_acquire+0x7d80/0x7d80 [ 1597.411929][ T627] ? down_read+0x1ac/0x2e0 [ 1597.416401][ T627] genl_rcv+0x28/0x40 [ 1597.420418][ T627] netlink_unicast+0x7b1/0x930 [ 1597.425237][ T627] netlink_sendmsg+0x8d0/0xbf0 [ 1597.430060][ T627] ? netlink_getsockopt+0x590/0x590 [ 1597.435290][ T627] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1597.440858][ T627] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1597.446171][ T627] ? security_socket_sendmsg+0x80/0xa0 [ 1597.451652][ T627] ? netlink_getsockopt+0x590/0x590 [ 1597.456872][ T627] ____sys_sendmsg+0x61b/0x980 [ 1597.461671][ T627] ? __asan_memset+0x22/0x40 [ 1597.466292][ T627] ? __sys_sendmsg_sock+0x30/0x30 [ 1597.471334][ T627] ? __import_iovec+0x5f2/0x850 [ 1597.476245][ T627] ? import_iovec+0x73/0xa0 [ 1597.480792][ T627] ___sys_sendmsg+0x2a6/0x360 [ 1597.485501][ T627] ? __sys_sendmsg+0x2b0/0x2b0 [ 1597.490331][ T627] __se_sys_sendmsg+0x1d0/0x2c0 [ 1597.495210][ T627] ? __x64_sys_sendmsg+0x80/0x80 [ 1597.500210][ T627] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1597.506166][ T627] do_syscall_64+0x55/0xb0 [ 1597.510627][ T627] ? clear_bhb_loop+0x40/0x90 [ 1597.515347][ T627] ? clear_bhb_loop+0x40/0x90 [ 1597.520059][ T627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.525994][ T627] RIP: 0033:0x7f80fcd9de99 [ 1597.530446][ T627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.550075][ T627] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.558521][ T627] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1597.566518][ T627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1597.574514][ T627] RBP: 00007f80fce33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1597.582515][ T627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.590522][ T627] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1597.598556][ T627] [ 1597.656434][ T638] netlink: 'syz.3.9102': attribute type 1 has an invalid length. [ 1597.679464][ T638] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.9102'. [ 1597.958135][ T648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1597.996031][ T648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1598.042551][ T648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1598.068090][ T648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1598.246440][ T654] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1598.257100][ T654] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1598.742813][ T666] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1598.873217][ T676] netlink: 'syz.2.9117': attribute type 19 has an invalid length. [ 1603.067449][ T754] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1604.330326][ T785] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1604.357547][ T785] FAULT_INJECTION: forcing a failure. [ 1604.357547][ T785] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.389736][ T785] CPU: 0 PID: 785 Comm: syz.1.9152 Not tainted syzkaller #0 [ 1604.397083][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1604.407186][ T785] Call Trace: [ 1604.410501][ T785] [ 1604.413462][ T785] dump_stack_lvl+0x18c/0x250 [ 1604.418186][ T785] ? show_regs_print_info+0x20/0x20 [ 1604.423463][ T785] ? load_image+0x420/0x420 [ 1604.428012][ T785] ? __lock_acquire+0x7d80/0x7d80 [ 1604.433092][ T785] should_fail_ex+0x394/0x4c0 [ 1604.437825][ T785] should_failslab+0x9/0x20 [ 1604.442377][ T785] slab_pre_alloc_hook+0x59/0x300 [ 1604.447471][ T785] ? device_rename+0xb3/0x1e0 [ 1604.452192][ T785] ? device_rename+0xb3/0x1e0 [ 1604.456905][ T785] __kmem_cache_alloc_node+0x53/0x250 [ 1604.462318][ T785] ? device_rename+0xb3/0x1e0 [ 1604.467025][ T785] __kmalloc_node_track_caller+0xa4/0x230 [ 1604.472813][ T785] kstrdup+0x3b/0x80 [ 1604.476764][ T785] device_rename+0xb3/0x1e0 [ 1604.481316][ T785] dev_change_name+0x308/0x8e0 [ 1604.486123][ T785] ? end_current_label_crit_section+0x170/0x170 [ 1604.492406][ T785] ? dev_ioctl+0x5dc/0x1140 [ 1604.496944][ T785] ? __lock_acquire+0x7d80/0x7d80 [ 1604.502022][ T785] ? dev_alloc_name+0x1d0/0x1d0 [ 1604.506913][ T785] ? full_name_hash+0x92/0xe0 [ 1604.511627][ T785] ? dev_ifsioc+0x316/0xc40 [ 1604.516168][ T785] dev_ioctl+0x5ec/0x1140 [ 1604.520546][ T785] sock_do_ioctl+0x239/0x310 [ 1604.525183][ T785] ? sock_show_fdinfo+0xb0/0xb0 [ 1604.530094][ T785] sock_ioctl+0x5be/0x7e0 [ 1604.534461][ T785] ? sock_poll+0x3e0/0x3e0 [ 1604.538927][ T785] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1604.543989][ T785] ? security_file_ioctl+0x80/0xa0 [ 1604.549139][ T785] ? sock_poll+0x3e0/0x3e0 [ 1604.553590][ T785] __se_sys_ioctl+0xfd/0x170 [ 1604.558258][ T785] do_syscall_64+0x55/0xb0 [ 1604.562721][ T785] ? clear_bhb_loop+0x40/0x90 [ 1604.567441][ T785] ? clear_bhb_loop+0x40/0x90 [ 1604.572163][ T785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1604.578109][ T785] RIP: 0033:0x7f80fcd9de99 [ 1604.582593][ T785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.602243][ T785] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.610691][ T785] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1604.618692][ T785] RDX: 00002000000007c0 RSI: 0000000000008923 RDI: 0000000000000003 [ 1604.626693][ T785] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.634692][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.642687][ T785] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1604.650701][ T785] [ 1605.462719][ T810] netlink: 'syz.2.9162': attribute type 3 has an invalid length. [ 1605.471745][ T810] __nla_validate_parse: 7 callbacks suppressed [ 1605.471759][ T810] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1606.020221][T14719] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 1606.269599][ T838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9171'. [ 1606.847272][ T863] netlink: 'syz.1.9181': attribute type 1 has an invalid length. [ 1606.858496][ T863] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9181'. [ 1607.272958][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.279354][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.287440][ T882] FAULT_INJECTION: forcing a failure. [ 1607.287440][ T882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1607.322469][ T882] CPU: 0 PID: 882 Comm: syz.2.9189 Not tainted syzkaller #0 [ 1607.329819][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1607.339912][ T882] Call Trace: [ 1607.343250][ T882] [ 1607.346231][ T882] dump_stack_lvl+0x18c/0x250 [ 1607.350962][ T882] ? show_regs_print_info+0x20/0x20 [ 1607.356220][ T882] ? load_image+0x420/0x420 [ 1607.360787][ T882] ? __lock_acquire+0x7d80/0x7d80 [ 1607.365865][ T882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1607.371300][ T882] should_fail_ex+0x394/0x4c0 [ 1607.376041][ T882] _copy_from_user+0x2f/0xe0 [ 1607.380666][ T882] copy_from_sockptr+0x69/0x80 [ 1607.385459][ T882] do_ip_setsockopt+0x1799/0x2d50 [ 1607.390508][ T882] ? ip_sock_set_pktinfo+0x30/0x30 [ 1607.395639][ T882] ? aa_sk_perm+0x83c/0x970 [ 1607.400160][ T882] ? __fget_files+0x28/0x460 [ 1607.404779][ T882] ? aa_af_perm+0x330/0x330 [ 1607.409301][ T882] ? __fget_files+0x28/0x460 [ 1607.413916][ T882] ? aa_sock_opt_perm+0x74/0x100 [ 1607.418912][ T882] ip_setsockopt+0x61/0x110 [ 1607.423427][ T882] ? sock_common_recvmsg+0x190/0x190 [ 1607.428735][ T882] do_sock_setsockopt+0x175/0x1a0 [ 1607.433770][ T882] ? __fdget+0x180/0x210 [ 1607.438034][ T882] __x64_sys_setsockopt+0x182/0x200 [ 1607.443262][ T882] do_syscall_64+0x55/0xb0 [ 1607.447701][ T882] ? clear_bhb_loop+0x40/0x90 [ 1607.452408][ T882] ? clear_bhb_loop+0x40/0x90 [ 1607.457142][ T882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1607.463064][ T882] RIP: 0033:0x7f149df9de99 [ 1607.467541][ T882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.487274][ T882] RSP: 002b:00007f149ee79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1607.495730][ T882] RAX: ffffffffffffffda RBX: 00007f149e225fa0 RCX: 00007f149df9de99 [ 1607.503720][ T882] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 1607.511704][ T882] RBP: 00007f149ee79090 R08: 000000000000000c R09: 0000000000000000 [ 1607.519685][ T882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.527675][ T882] R13: 00007f149e226038 R14: 00007f149e225fa0 R15: 00007ffd1e817a28 [ 1607.535677][ T882] [ 1607.851869][ T892] netlink: 668 bytes leftover after parsing attributes in process `syz.3.9193'. [ 1607.888952][ T892] net_ratelimit: 38 callbacks suppressed [ 1607.889002][ T892] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1607.920987][ T892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1609.272719][ T964] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9207'. [ 1610.056542][ T978] netlink: 'syz.1.9212': attribute type 29 has an invalid length. [ 1610.067603][ T978] netlink: 'syz.1.9212': attribute type 29 has an invalid length. [ 1610.080220][ T980] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9213'. [ 1610.161555][ T981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1611.548437][ T1023] syzkaller0: entered promiscuous mode [ 1611.573864][ T1023] syzkaller0: entered allmulticast mode [ 1612.189415][ T1053] FAULT_INJECTION: forcing a failure. [ 1612.189415][ T1053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.210450][ T1053] CPU: 1 PID: 1053 Comm: syz.0.9228 Not tainted syzkaller #0 [ 1612.217875][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1612.227968][ T1053] Call Trace: [ 1612.231285][ T1053] [ 1612.234242][ T1053] dump_stack_lvl+0x18c/0x250 [ 1612.238953][ T1053] ? show_regs_print_info+0x20/0x20 [ 1612.244185][ T1053] ? load_image+0x420/0x420 [ 1612.248774][ T1053] ? __lock_acquire+0x7d80/0x7d80 [ 1612.253856][ T1053] should_fail_ex+0x394/0x4c0 [ 1612.258577][ T1053] _copy_to_user+0x2f/0xa0 [ 1612.263025][ T1053] simple_read_from_buffer+0xe7/0x150 [ 1612.268431][ T1053] proc_fail_nth_read+0x1e8/0x260 [ 1612.273497][ T1053] ? proc_fault_inject_write+0x360/0x360 [ 1612.279169][ T1053] ? fsnotify_perm+0x271/0x5e0 [ 1612.283976][ T1053] ? proc_fault_inject_write+0x360/0x360 [ 1612.289660][ T1053] vfs_read+0x298/0x990 [ 1612.293876][ T1053] ? kernel_read+0x1e0/0x1e0 [ 1612.298512][ T1053] ? __fget_files+0x28/0x460 [ 1612.303140][ T1053] ? __fget_files+0x3fc/0x460 [ 1612.307879][ T1053] ? __fdget_pos+0x2a3/0x330 [ 1612.312526][ T1053] ? ksys_read+0x74/0x260 [ 1612.316920][ T1053] ksys_read+0x151/0x260 [ 1612.321206][ T1053] ? vfs_write+0x9a0/0x9a0 [ 1612.325660][ T1053] ? lockdep_hardirqs_on+0x98/0x150 [ 1612.330892][ T1053] do_syscall_64+0x55/0xb0 [ 1612.335351][ T1053] ? clear_bhb_loop+0x40/0x90 [ 1612.340058][ T1053] ? clear_bhb_loop+0x40/0x90 [ 1612.344787][ T1053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1612.350728][ T1053] RIP: 0033:0x7fa11df5e6ce [ 1612.355181][ T1053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1612.374814][ T1053] RSP: 002b:00007fa11edf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1612.383243][ T1053] RAX: ffffffffffffffda RBX: 00007fa11edf26c0 RCX: 00007fa11df5e6ce [ 1612.391225][ T1053] RDX: 000000000000000f RSI: 00007fa11edf20a0 RDI: 0000000000000004 [ 1612.399223][ T1053] RBP: 00007fa11edf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.407219][ T1053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.415208][ T1053] R13: 00007fa11e226038 R14: 00007fa11e225fa0 R15: 00007ffde00a2278 [ 1612.423207][ T1053] [ 1612.973703][ T1068] FAULT_INJECTION: forcing a failure. [ 1612.973703][ T1068] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.004098][ T1068] CPU: 0 PID: 1068 Comm: syz.3.9233 Not tainted syzkaller #0 [ 1613.011546][ T1068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1613.021690][ T1068] Call Trace: [ 1613.025012][ T1068] [ 1613.027998][ T1068] dump_stack_lvl+0x18c/0x250 [ 1613.032756][ T1068] ? show_regs_print_info+0x20/0x20 [ 1613.038016][ T1068] ? load_image+0x420/0x420 [ 1613.042610][ T1068] ? __lock_acquire+0x7d80/0x7d80 [ 1613.047701][ T1068] ? rcu_is_watching+0x15/0xb0 [ 1613.052559][ T1068] ? __alloc_pages+0x276/0x460 [ 1613.057409][ T1068] should_fail_ex+0x394/0x4c0 [ 1613.062174][ T1068] should_failslab+0x9/0x20 [ 1613.066743][ T1068] slab_pre_alloc_hook+0x59/0x300 [ 1613.071853][ T1068] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1613.077826][ T1068] __kmem_cache_alloc_node+0x53/0x250 [ 1613.083288][ T1068] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1613.089238][ T1068] kmalloc_trace+0x2a/0xe0 [ 1613.093728][ T1068] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1613.099499][ T1068] ? sctp_stream_interleave_init+0x55/0x90 [ 1613.105407][ T1068] sctp_association_new+0x15be/0x25b0 [ 1613.110888][ T1068] sctp_connect_new_asoc+0x2de/0x6a0 [ 1613.116261][ T1068] ? __sctp_connect+0xd80/0xd80 [ 1613.121167][ T1068] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1613.126607][ T1068] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1613.132204][ T1068] ? security_sctp_bind_connect+0x89/0xb0 [ 1613.138001][ T1068] sctp_sendmsg+0x1519/0x27b0 [ 1613.142777][ T1068] ? sctp_getsockopt+0xb60/0xb60 [ 1613.147804][ T1068] ? aa_af_perm+0x330/0x330 [ 1613.152393][ T1068] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1613.158880][ T1068] ? sock_rps_record_flow+0x19/0x3f0 [ 1613.164232][ T1068] ? inet_sendmsg+0xce/0x2a0 [ 1613.168879][ T1068] ? inet_send_prepare+0x250/0x250 [ 1613.174057][ T1068] ____sys_sendmsg+0x61b/0x980 [ 1613.178902][ T1068] ? __asan_memset+0x22/0x40 [ 1613.183577][ T1068] ? __sys_sendmsg_sock+0x30/0x30 [ 1613.188670][ T1068] ? __import_iovec+0x5f2/0x850 [ 1613.193613][ T1068] ? import_iovec+0x73/0xa0 [ 1613.198206][ T1068] ___sys_sendmsg+0x2a6/0x360 [ 1613.202978][ T1068] ? get_pid_task+0x20/0x1e0 [ 1613.207683][ T1068] ? __sys_sendmsg+0x2b0/0x2b0 [ 1613.212592][ T1068] ? __lock_acquire+0x7d80/0x7d80 [ 1613.217795][ T1068] __se_sys_sendmsg+0x1d0/0x2c0 [ 1613.222729][ T1068] ? __x64_sys_sendmsg+0x80/0x80 [ 1613.227799][ T1068] ? lockdep_hardirqs_on+0x98/0x150 [ 1613.233090][ T1068] do_syscall_64+0x55/0xb0 [ 1613.237570][ T1068] ? clear_bhb_loop+0x40/0x90 [ 1613.242317][ T1068] ? clear_bhb_loop+0x40/0x90 [ 1613.247061][ T1068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1613.253033][ T1068] RIP: 0033:0x7f4f2b59de99 [ 1613.257511][ T1068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.277197][ T1068] RSP: 002b:00007f4f2c4f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.285690][ T1068] RAX: ffffffffffffffda RBX: 00007f4f2b825fa0 RCX: 00007f4f2b59de99 [ 1613.293760][ T1068] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 1613.301826][ T1068] RBP: 00007f4f2c4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.309873][ T1068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.317943][ T1068] R13: 00007f4f2b826038 R14: 00007f4f2b825fa0 R15: 00007fff3b10eb38 [ 1613.326080][ T1068] [ 1613.646975][ T1076] netlink: 668 bytes leftover after parsing attributes in process `syz.3.9235'. [ 1613.656166][ T1076] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1613.671195][ T1076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1614.572909][ T1075] netlink: 'syz.3.9235': attribute type 21 has an invalid length. [ 1614.661425][T14719] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 1614.860617][ T1088] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9239'. [ 1615.394249][ T1103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9243'. [ 1615.797698][ T1112] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9246'. [ 1615.891319][ T1116] syzkaller0: entered promiscuous mode [ 1615.897298][ T1116] syzkaller0: entered allmulticast mode [ 1617.949801][ T1146] FAULT_INJECTION: forcing a failure. [ 1617.949801][ T1146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.966830][ T1146] CPU: 0 PID: 1146 Comm: syz.2.9258 Not tainted syzkaller #0 [ 1617.974247][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.984406][ T1146] Call Trace: [ 1617.987696][ T1146] [ 1617.990629][ T1146] dump_stack_lvl+0x18c/0x250 [ 1617.995312][ T1146] ? show_regs_print_info+0x20/0x20 [ 1618.000515][ T1146] ? load_image+0x420/0x420 [ 1618.005030][ T1146] ? __might_fault+0xaa/0x120 [ 1618.009708][ T1146] should_fail_ex+0x394/0x4c0 [ 1618.014393][ T1146] copyout+0x1a/0x90 [ 1618.018309][ T1146] _copy_to_iter+0x42b/0x1110 [ 1618.022988][ T1146] ? __virt_addr_valid+0x10c/0x380 [ 1618.028133][ T1146] ? iov_iter_init+0x1e0/0x1e0 [ 1618.032927][ T1146] ? __virt_addr_valid+0x10c/0x380 [ 1618.038044][ T1146] ? __virt_addr_valid+0x10c/0x380 [ 1618.043166][ T1146] ? __virt_addr_valid+0x10c/0x380 [ 1618.048296][ T1146] ? __check_object_size+0x4fc/0xa40 [ 1618.053597][ T1146] __skb_datagram_iter+0xdb/0x780 [ 1618.058646][ T1146] ? skb_copy_datagram_iter+0x200/0x200 [ 1618.064209][ T1146] skb_copy_datagram_iter+0xb1/0x200 [ 1618.069503][ T1146] netlink_recvmsg+0x2d4/0xe60 [ 1618.074272][ T1146] ? netlink_sendmsg+0xbf0/0xbf0 [ 1618.079218][ T1146] ? aa_af_perm+0x330/0x330 [ 1618.083726][ T1146] ? __lock_acquire+0x1262/0x7d80 [ 1618.088772][ T1146] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1618.094056][ T1146] ? security_socket_recvmsg+0x89/0xb0 [ 1618.099508][ T1146] ? netlink_sendmsg+0xbf0/0xbf0 [ 1618.104529][ T1146] ____sys_recvmsg+0x2bd/0x5d0 [ 1618.109300][ T1146] ? __sys_recvmsg_sock+0x50/0x50 [ 1618.114335][ T1146] ? import_iovec+0x73/0xa0 [ 1618.118841][ T1146] ___sys_recvmsg+0x214/0x590 [ 1618.123534][ T1146] ? __sys_recvmsg+0x2a0/0x2a0 [ 1618.128310][ T1146] ? ksys_write+0x1d2/0x260 [ 1618.132835][ T1146] ? __fget_files+0x3fc/0x460 [ 1618.137551][ T1146] __x64_sys_recvmsg+0x21e/0x2f0 [ 1618.142513][ T1146] ? ___sys_recvmsg+0x590/0x590 [ 1618.147483][ T1146] ? lockdep_hardirqs_on+0x98/0x150 [ 1618.152707][ T1146] do_syscall_64+0x55/0xb0 [ 1618.157160][ T1146] ? clear_bhb_loop+0x40/0x90 [ 1618.161838][ T1146] ? clear_bhb_loop+0x40/0x90 [ 1618.166510][ T1146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.172423][ T1146] RIP: 0033:0x7f149df9de99 [ 1618.176859][ T1146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.196466][ T1146] RSP: 002b:00007f149ee37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1618.204877][ T1146] RAX: ffffffffffffffda RBX: 00007f149e226180 RCX: 00007f149df9de99 [ 1618.212854][ T1146] RDX: 0000000000012000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1618.220823][ T1146] RBP: 00007f149ee37090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.228792][ T1146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.236768][ T1146] R13: 00007f149e226218 R14: 00007f149e226180 R15: 00007ffd1e817a28 [ 1618.244753][ T1146] [ 1618.671332][ T1123] netlink: 'syz.1.9250': attribute type 10 has an invalid length. [ 1618.679619][ T1123] team0: Device .` is already an upper device of the team interface [ 1618.790362][ T1148] netlink: 'syz.3.9260': attribute type 10 has an invalid length. [ 1619.992314][ T1178] syzkaller0: entered promiscuous mode [ 1620.012592][ T1178] syzkaller0: entered allmulticast mode [ 1620.209265][ T1192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1622.050227][ T1192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1622.061128][ T1195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1622.201923][ T1207] netlink: 'syz.1.9280': attribute type 10 has an invalid length. [ 1622.215059][ T1207] team0: Device .` is already an upper device of the team interface [ 1622.224617][ T1207] FAULT_INJECTION: forcing a failure. [ 1622.224617][ T1207] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.240694][ T1207] CPU: 1 PID: 1207 Comm: syz.1.9280 Not tainted syzkaller #0 [ 1622.248117][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1622.258217][ T1207] Call Trace: [ 1622.261549][ T1207] [ 1622.264507][ T1207] dump_stack_lvl+0x18c/0x250 [ 1622.269240][ T1207] ? show_regs_print_info+0x20/0x20 [ 1622.274489][ T1207] ? load_image+0x420/0x420 [ 1622.279040][ T1207] ? __might_sleep+0xe0/0xe0 [ 1622.283659][ T1207] ? __lock_acquire+0x7d80/0x7d80 [ 1622.288726][ T1207] should_fail_ex+0x394/0x4c0 [ 1622.293437][ T1207] should_failslab+0x9/0x20 [ 1622.297991][ T1207] slab_pre_alloc_hook+0x59/0x300 [ 1622.303053][ T1207] ? lockdep_hardirqs_on+0x98/0x150 [ 1622.308294][ T1207] kmem_cache_alloc_node+0x5e/0x310 [ 1622.313519][ T1207] ? __alloc_skb+0x103/0x2c0 [ 1622.318137][ T1207] __alloc_skb+0x103/0x2c0 [ 1622.322580][ T1207] netlink_ack+0x377/0x1160 [ 1622.327151][ T1207] ? netlink_dump+0xec0/0xec0 [ 1622.331853][ T1207] ? perf_trace_lock+0xfc/0x3b0 [ 1622.336722][ T1207] netlink_rcv_skb+0x2b3/0x4c0 [ 1622.341512][ T1207] ? rtnetlink_bind+0x80/0x80 [ 1622.346216][ T1207] ? netlink_ack+0x1160/0x1160 [ 1622.351044][ T1207] ? __lock_acquire+0x7d80/0x7d80 [ 1622.356099][ T1207] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.361330][ T1207] netlink_unicast+0x7b1/0x930 [ 1622.366127][ T1207] netlink_sendmsg+0x8d0/0xbf0 [ 1622.370906][ T1207] ? netlink_getsockopt+0x590/0x590 [ 1622.376115][ T1207] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1622.381672][ T1207] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1622.386966][ T1207] ? security_socket_sendmsg+0x80/0xa0 [ 1622.392436][ T1207] ? netlink_getsockopt+0x590/0x590 [ 1622.397659][ T1207] ____sys_sendmsg+0x61b/0x980 [ 1622.402449][ T1207] ? __asan_memset+0x22/0x40 [ 1622.407068][ T1207] ? __sys_sendmsg_sock+0x30/0x30 [ 1622.412110][ T1207] ? __import_iovec+0x5f2/0x850 [ 1622.416998][ T1207] ? import_iovec+0x73/0xa0 [ 1622.421540][ T1207] ___sys_sendmsg+0x2a6/0x360 [ 1622.426251][ T1207] ? __sys_sendmsg+0x2b0/0x2b0 [ 1622.431044][ T1207] ? __lock_acquire+0x7d80/0x7d80 [ 1622.436107][ T1207] __se_sys_sendmsg+0x1d0/0x2c0 [ 1622.440972][ T1207] ? __x64_sys_sendmsg+0x80/0x80 [ 1622.445951][ T1207] ? lockdep_hardirqs_on+0x98/0x150 [ 1622.451167][ T1207] do_syscall_64+0x55/0xb0 [ 1622.455591][ T1207] ? clear_bhb_loop+0x40/0x90 [ 1622.460278][ T1207] ? clear_bhb_loop+0x40/0x90 [ 1622.464964][ T1207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1622.470872][ T1207] RIP: 0033:0x7f80fcd9de99 [ 1622.475315][ T1207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.494937][ T1207] RSP: 002b:00007f80fdc23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.503363][ T1207] RAX: ffffffffffffffda RBX: 00007f80fd025fa0 RCX: 00007f80fcd9de99 [ 1622.511380][ T1207] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1622.519366][ T1207] RBP: 00007f80fdc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.527355][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.535337][ T1207] R13: 00007f80fd026038 R14: 00007f80fd025fa0 R15: 00007fff588ba718 [ 1622.543331][ T1207] [ 1623.264044][ T1237] netlink: 'syz.0.9289': attribute type 10 has an invalid length. [ 1625.958806][ T1234] ------------[ cut here ]------------ [ 1625.964441][ T1234] WARNING: CPU: 0 PID: 1234 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 1625.974290][ T1234] Modules linked in: [ 1625.978229][ T1234] CPU: 0 PID: 1234 Comm: syz.2.9288 Not tainted syzkaller #0 [ 1625.986266][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1625.997225][ T1234] RIP: 0010:perf_pending_task+0x357/0x480 [ 1626.003703][ T1234] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 f0 f3 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1626.024133][ T1234] RSP: 0018:ffffc900034a79c8 EFLAGS: 00010293 [ 1626.030241][ T1234] RAX: ffffffff81b1a947 RBX: ffff88806852af10 RCX: ffff88802bef3c00 [ 1626.039242][ T1234] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1626.047948][ T1234] RBP: ffff88806852acd0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1626.056172][ T1234] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802bef3c00 [ 1626.064285][ T1234] R13: ffff88802f27bd30 R14: 0000000000000000 R15: 1ffff1100d0a559a [ 1626.072289][ T1234] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1626.081340][ T1234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.088488][ T1234] CR2: 00007f6c9dc5fee9 CR3: 0000000064fa5000 CR4: 00000000003506f0 [ 1626.096655][ T1234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 1626.104863][ T1234] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1626.113001][ T1234] Call Trace: [ 1626.116315][ T1234] [ 1626.119291][ T1234] task_work_run+0x1d4/0x260 [ 1626.124053][ T1234] ? task_work_cancel+0x220/0x220 [ 1626.129141][ T1234] do_exit+0x986/0x2530 [ 1626.133516][ T1234] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1626.139574][ T1234] ? put_task_struct+0xc0/0xc0 [ 1626.144505][ T1234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.150701][ T1234] ? lockdep_hardirqs_on+0x98/0x150 [ 1626.155996][ T1234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.162198][ T1234] do_group_exit+0x22d/0x2f0 [ 1626.166995][ T1234] ? _raw_spin_unlock_irq+0x29/0x50 [ 1626.172310][ T1234] get_signal+0x12a6/0x1390 [ 1626.177059][ T1234] arch_do_signal_or_restart+0xc2/0x7b0 [ 1626.182877][ T1234] ? get_sigframe_size+0x20/0x20 [ 1626.187903][ T1234] ? perf_trace_preemptirq_template+0xac/0x330 [ 1626.194209][ T1234] ? exit_to_user_mode_loop+0x3b/0x110 [ 1626.199725][ T1234] exit_to_user_mode_loop+0x70/0x110 [ 1626.205209][ T1234] exit_to_user_mode_prepare+0xee/0x180 [ 1626.210820][ T1234] syscall_exit_to_user_mode+0x1a/0x50 [ 1626.216382][ T1234] do_syscall_64+0x61/0xb0 [ 1626.220852][ T1234] ? clear_bhb_loop+0x40/0x90 [ 1626.225699][ T1234] ? clear_bhb_loop+0x40/0x90 [ 1626.230431][ T1234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.236491][ T1234] RIP: 0033:0x7f149df9de99 [ 1626.240956][ T1234] Code: Unable to access opcode bytes at 0x7f149df9de6f. [ 1626.248267][ T1234] RSP: 002b:00007f149ee580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1626.256849][ T1234] RAX: fffffffffffffe00 RBX: 00007f149e226098 RCX: 00007f149df9de99 [ 1626.264991][ T1234] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f149e226098 [ 1626.273063][ T1234] RBP: 00007f149e226090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.281076][ T1234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.289205][ T1234] R13: 00007f149e226128 R14: 00007ffd1e817940 R15: 00007ffd1e817a28 [ 1626.297311][ T1234] [ 1626.300379][ T1234] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1626.307676][ T1234] CPU: 0 PID: 1234 Comm: syz.2.9288 Not tainted syzkaller #0 [ 1626.315064][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1626.325129][ T1234] Call Trace: [ 1626.328418][ T1234] [ 1626.331358][ T1234] dump_stack_lvl+0x18c/0x250 [ 1626.336053][ T1234] ? show_regs_print_info+0x20/0x20 [ 1626.341269][ T1234] ? load_image+0x420/0x420 [ 1626.345797][ T1234] panic+0x2ca/0x720 [ 1626.349732][ T1234] ? bpf_jit_dump+0xd0/0xd0 [ 1626.354268][ T1234] __warn+0x2e0/0x470 [ 1626.358288][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.363452][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.368593][ T1234] report_bug+0x2be/0x4f0 [ 1626.372993][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.378137][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.383286][ T1234] ? perf_pending_task+0x359/0x480 [ 1626.388432][ T1234] handle_bug+0xcf/0x120 [ 1626.392690][ T1234] exc_invalid_op+0x1a/0x50 [ 1626.397222][ T1234] asm_exc_invalid_op+0x1a/0x20 [ 1626.402100][ T1234] RIP: 0010:perf_pending_task+0x357/0x480 [ 1626.407858][ T1234] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 f0 f3 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1626.427497][ T1234] RSP: 0018:ffffc900034a79c8 EFLAGS: 00010293 [ 1626.433594][ T1234] RAX: ffffffff81b1a947 RBX: ffff88806852af10 RCX: ffff88802bef3c00 [ 1626.441581][ T1234] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1626.449570][ T1234] RBP: ffff88806852acd0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1626.457564][ T1234] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802bef3c00 [ 1626.465567][ T1234] R13: ffff88802f27bd30 R14: 0000000000000000 R15: 1ffff1100d0a559a [ 1626.473562][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.478739][ T1234] ? perf_pending_task+0x357/0x480 [ 1626.483921][ T1234] task_work_run+0x1d4/0x260 [ 1626.488558][ T1234] ? task_work_cancel+0x220/0x220 [ 1626.493625][ T1234] do_exit+0x986/0x2530 [ 1626.497820][ T1234] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1626.503826][ T1234] ? put_task_struct+0xc0/0xc0 [ 1626.508618][ T1234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.514790][ T1234] ? lockdep_hardirqs_on+0x98/0x150 [ 1626.520012][ T1234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.526185][ T1234] do_group_exit+0x22d/0x2f0 [ 1626.530800][ T1234] ? _raw_spin_unlock_irq+0x29/0x50 [ 1626.536019][ T1234] get_signal+0x12a6/0x1390 [ 1626.540552][ T1234] arch_do_signal_or_restart+0xc2/0x7b0 [ 1626.546127][ T1234] ? get_sigframe_size+0x20/0x20 [ 1626.551126][ T1234] ? perf_trace_preemptirq_template+0xac/0x330 [ 1626.557326][ T1234] ? exit_to_user_mode_loop+0x3b/0x110 [ 1626.562816][ T1234] exit_to_user_mode_loop+0x70/0x110 [ 1626.568131][ T1234] exit_to_user_mode_prepare+0xee/0x180 [ 1626.573723][ T1234] syscall_exit_to_user_mode+0x1a/0x50 [ 1626.579217][ T1234] do_syscall_64+0x61/0xb0 [ 1626.583642][ T1234] ? clear_bhb_loop+0x40/0x90 [ 1626.588329][ T1234] ? clear_bhb_loop+0x40/0x90 [ 1626.593024][ T1234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.598937][ T1234] RIP: 0033:0x7f149df9de99 [ 1626.603366][ T1234] Code: Unable to access opcode bytes at 0x7f149df9de6f. [ 1626.610406][ T1234] RSP: 002b:00007f149ee580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1626.618855][ T1234] RAX: fffffffffffffe00 RBX: 00007f149e226098 RCX: 00007f149df9de99 [ 1626.626847][ T1234] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f149e226098 [ 1626.634837][ T1234] RBP: 00007f149e226090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.642823][ T1234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.650808][ T1234] R13: 00007f149e226128 R14: 00007ffd1e817940 R15: 00007ffd1e817a28 [ 1626.658811][ T1234] [ 1626.662411][ T1234] Kernel Offset: disabled [ 1626.666741][ T1234] Rebooting in 86400 seconds..